Lucene search
RootSSV:61887HistoryMar 21, 2014 - 12:00 a.m.
cURL/libcURL SSL证书验证安全限制绕过漏洞
2014-03-2100:00:00
Root
www.seebug.org
37
EPSS
0.003
Percentile
69.4%
BUGTRAQ ID: 66296
CVE ID: CVE-2014-2522
cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。
cURL/libcURL在服务器证书的验证上存在安全漏洞，成功利用后可导致中间人攻击或服务器欺骗。
0
cURL
目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：
http://curl.haxx.se/
Related
cvelist
cvelist
CVE-2014-2522
2014-04-18 19:00:00
f5
f5
SOL15873 - cURL/libcURL vulnerability CVE-2014-2522
2014-11-27 00:00:00
K15873 : cURL/libcURL vulnerability CVE-2014-2522
2014-11-27 00:00:00
veracode
veracode
Improper Validation
2018-08-13 17:40:23
prion
prion
Code injection
2014-04-18 22:14:00
ubuntucve
ubuntucve
CVE-2014-2522
2014-04-18 00:00:00
debiancve
debiancve
CVE-2014-2522
2014-04-18 22:14:38
cve
cve
CVE-2014-2522
2014-04-18 22:14:38
nvd
nvd
CVE-2014-2522
2014-04-18 22:14:38
securityvulns
securityvulns
curl multiple security vulnerabilities
2014-04-01 00:00:00
[slackware-security] curl (SSA:2014-086-01)
2014-04-01 00:00:00
ibm
ibm
slackware
slackware
[slackware-security] curl
2014-03-28 22:53:36
openvas
openvas
Slackware: Security Advisory (SSA:2014-086-01)
2022-04-21 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1172)
2020-01-23 00:00:00
nessus
nessus
EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)
2019-04-09 00:00:00
HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)
2016-03-29 00:00:00
hackerone
hackerone
curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS
2024-03-14 11:49:49