Lucene search
Ubuntu.comUB:CVE-2014-3707HistoryNov 05, 2014 - 12:00 a.m.
CVE-2014-3707
2014-11-0500:00:00
ubuntu.com
ubuntu.com
15
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.5%
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when
running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP
POST data for an easy handle, which triggers an out-of-bounds read that
allows remote web servers to read sensitive memory information.
Related
debian
debian
[SECURITY] [DLA 84-1] curl security update
2014-11-09 16:18:30
[SECURITY] [DSA 3069-1] curl security update
2014-11-07 15:40:07
[SECURITY] [DSA 3069-1] curl security update
2014-11-07 15:40:07
nessus
nessus
Oracle Solaris Third-Party Patch Update : libcurl (cve_2014_3707_information_disclosure)
2015-01-19 00:00:00
Fedora 21 : curl-7.37.0-11.fc21 (2014-16605)
2014-12-15 00:00:00
Fedora 20 : curl-7.32.0-17.fc20 (2014-16538)
2014-12-15 00:00:00
securityvulns
securityvulns
libcurl information leakage
2014-11-24 00:00:00
[ MDVSA-2014:213 ] curl
2014-11-24 00:00:00
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0444)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2399-1)
2014-11-11 00:00:00
Debian: Security Advisory (DLA-84-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: curl-7.37.0-11.fc21
2014-12-15 04:27:56
[SECURITY] Fedora 21 Update: curl-7.37.0-9.fc21
2014-11-10 06:43:36
[SECURITY] Fedora 21 Update: mingw-curl-7.39.0-1.fc21
2015-01-02 05:06:16
cvelist
cvelist
CVE-2014-3707
2014-11-15 20:00:00
prion
prion
Out-of-bounds
2014-11-15 20:59:00
nvd
nvd
CVE-2014-3707
2014-11-15 20:59:00
debiancve
debiancve
CVE-2014-3707
2014-11-15 20:59:00
veracode
veracode
Information Disclosure
2018-08-13 03:43:07
CRLF Injection
2019-05-02 05:40:50
archlinux
archlinux
curl: out-of-bounds read
2014-11-11 00:00:00
ubuntu
ubuntu
curl vulnerability
2014-11-10 00:00:00
osv
osv
curl - security update
2014-11-09 00:00:00
curl - security update
2014-11-07 00:00:00
hackerone
hackerone
Internet Bug Bounty: libcurl duphandle read out of bounds
2015-09-16 00:00:00
mageia
mageia
Updated curl packages fix CVE-2014-3707
2014-11-14 03:57:44
cve
cve
CVE-2014-3707
2014-11-15 20:59:00
amazon
amazon
Medium: curl
2015-02-11 19:36:00
f5
f5
ibm
ibm
centos
centos
curl, libcurl security update
2015-11-30 19:26:37
curl, libcurl security update
2015-07-26 14:12:23
oraclelinux
oraclelinux
curl security, bug fix, and enhancement update
2015-07-28 00:00:00
curl security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2015:2159) Moderate: curl security, bug fix, and enhancement update
2015-11-19 14:41:12
(RHSA-2015:1254) Moderate: curl security, bug fix, and enhancement update
2015-07-22 05:29:46
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.5%
Related for UB:CVE-2014-3707