Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2167-1
HistoryApr 14, 2014 - 12:00 a.m.

curl vulnerabilities

2014-04-1400:00:00
ubuntu.com
28

7 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.6%

JSON

Releases

  • Ubuntu 13.10
  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • curl - HTTP, HTTPS, and FTP client and client libraries

Details

Steve Holme discovered that libcurl incorrectly reused wrong connections
when using protocols other than HTTP and FTP. This could lead to the use of
unintended credentials, possibly exposing sensitive information.
(CVE-2014-0138)

Richard Moore discovered that libcurl incorrectly validated wildcard SSL
certificates that contain literal IP addresses. An attacker could possibly
exploit this to perform a machine-in-the-middle attack to view sensitive
information or alter encrypted communications. (CVE-2014-0139)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchlibcurl3< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchcurl< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchcurl-udeb< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl3-dbg< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl3-gnutls< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl3-nss< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl3-udeb< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl4-gnutls-dev< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl4-nss-dev< 7.32.0-1ubuntu1.4UNKNOWN
Ubuntu13.10noarchlibcurl4-openssl-dev< 7.32.0-1ubuntu1.4UNKNOWN
Rows per page:
1-10 of 361

Related

openvas 34
nessus 30
ibm 11
gentoo 1
debian 2
osv 3
fedora 5
f5 2
mageia 2
securityvulns 4
slackware 1
debiancve 2
prion 2
veracode 2
ubuntucve 2
cve 2
alpinelinux 2
oraclelinux 1
amazon 1
redhat 2
centos 1
hackerone 1
vmware 2
ics 1
rosalinux 1
oracle 1
openvas
openvas
Debian Security Advisory DSA 2902-1 (curl - security update)
2014-04-13 00:00:00
Ubuntu: Security Advisory (USN-2167-1)
2014-04-15 00:00:00
Ubuntu Update for curl USN-2167-1
2014-04-15 00:00:00
nessus
nessus
SuSE 11.3 Security Update : curl (SAT Patch Number 9133)
2014-05-21 00:00:00
Debian DSA-2902-1 : curl - security update
2014-04-14 00:00:00
Fedora 19 : mingw-curl-7.37.0-1.fc19 (2014-6921)
2014-06-10 00:00:00
ibm
ibm
Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following libcURL vulnerabilities: (CVE-2014-0139, CVE-2014-0138)
2018-06-17 14:42:46
Security Bulletin: IBM ToolsCenter is affected by several cURL potential vulnerabilities (CVE-2014-0015, CVE-2014-0139, CVE-2014-0138, CVE-2014-2522)
2019-01-31 01:25:01
Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)
2019-01-31 01:35:01
gentoo
gentoo
cURL: Multiple vulnerabilities
2014-06-22 00:00:00
debian
debian
[SECURITY] [DSA 2902-1] curl security update
2014-04-13 08:26:48
[SECURITY] [DSA 2902-1] curl security update
2014-04-13 08:26:48
osv
osv
curl - security update
2014-04-13 00:00:00
CVE-2014-0139
2014-04-15 14:55:00
CVE-2014-0138
2014-04-15 14:55:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-curl-7.37.0-1.fc20
2014-06-10 02:52:24
[SECURITY] Fedora 19 Update: mingw-curl-7.37.0-1.fc19
2014-06-10 03:11:23
[SECURITY] Fedora 20 Update: mingw-curl-7.39.0-1.fc20
2015-01-02 05:06:39
f5
f5
SOL15862 - Multiple cURL and libcurl vulnerabilities CVE-2014-0015, CVE-2014-0138, and CVE-2014-0139
2014-11-25 00:00:00
K15862 : Multiple cURL and libcurl vulnerabilities CVE-2014-0015, CVE-2014-0138, and CVE-2014-0139
2014-11-25 00:00:00
mageia
mageia
Updated curl packages fix multiple vulnerabilities
2014-04-03 04:56:35
Updated lftp packages fix CVE-2014-0139
2015-04-24 00:14:25
securityvulns
securityvulns
curl multiple security vulnerabilities
2014-04-01 00:00:00
[slackware-security] curl &#40;SSA:2014-086-01&#41;
2014-04-01 00:00:00
NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
2014-12-11 00:00:00
slackware
slackware
[slackware-security] curl
2014-03-28 22:53:36
debiancve
debiancve
CVE-2014-0139
2014-04-15 14:55:00
CVE-2014-0138
2014-04-15 14:55:00
prion
prion
Design/Logic Flaw
2014-04-15 14:55:00
Default configuration
2014-04-15 14:55:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-06-10 05:39:48
Insecure Defaults
2018-08-14 06:19:27
ubuntucve
ubuntucve
CVE-2014-0139
2014-03-27 00:00:00
CVE-2014-0138
2014-03-27 00:00:00
cve
cve
CVE-2014-0139
2014-04-15 14:55:00
CVE-2014-0138
2014-04-15 14:55:00
alpinelinux
alpinelinux
CVE-2014-0139
2014-04-15 14:55:00
CVE-2014-0138
2014-04-15 14:55:00
oraclelinux
oraclelinux
curl security and bug fix update
2014-05-27 00:00:00
amazon
amazon
Medium: curl
2014-04-10 23:54:00
redhat
redhat
(RHSA-2014:0561) Moderate: curl security and bug fix update
2014-05-27 00:00:00
(RHSA-2014:0629) Important: rhev-hypervisor6 security update
2014-06-05 00:00:00
centos
centos
curl, libcurl security update
2014-05-28 12:52:04
hackerone
hackerone
curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS
2024-03-14 11:49:49
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1818
2021-07-02 16:36:57
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

7 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.006 Low

EPSS

Percentile

78.6%

JSON
Related for USN-2167-1
openvas34nessus30ibm11gentoo1debian2osv3fedora5f52mageia2securityvulns4slackware1debiancve2prion2veracode2ubuntucve2cve2alpinelinux2oraclelinux1amazon1redhat2centos1hackerone1vmware2ics1rosalinux1oracle1