Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-3236
HistoryJun 17, 2015 - 12:00 a.m.

CVE-2015-3236

2015-06-1700:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON

cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication
credentials for a previous connection when reusing a reset
(curl_easy_reset) connection handle to send a request to the same host
name, which allows remote attackers to obtain sensitive information via
unspecified vectors.

Notes

Author Note
mdeslaur only affects 7.40.0+

Related

prion 1
cve 1
debiancve 1
kaspersky 1
nessus 6
openvas 5
freebsd 1
fedora 1
amazon 1
archlinux 1
altlinux 1
mageia 1
gentoo 1
slackware 1
ibm 1
securityvulns 1
oracle 4
prion
prion
Design/Logic Flaw
2015-06-22 19:59:00
cve
cve
CVE-2015-3236
2015-06-22 19:59:00
debiancve
debiancve
CVE-2015-3236
2015-06-22 19:59:00
kaspersky
kaspersky
KLA10618 Information disclosure vulnerability in cURL
2015-06-22 00:00:00
nessus
nessus
FreeBSD : cURL -- Multiple Vulnerability (2438d4af-1538-11e5-a106-3c970e169bc2)
2015-06-18 00:00:00
Amazon Linux AMI : curl (ALAS-2015-551)
2015-06-22 00:00:00
openSUSE Security Update : curl (openSUSE-2015-446)
2015-06-25 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-551)
2015-09-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0263)
2015-10-15 00:00:00
Fedora Update for curl FEDORA-2015-10155
2015-07-07 00:00:00
freebsd
freebsd
cURL -- Multiple Vulnerability
2015-06-17 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: curl-7.40.0-5.fc22
2015-06-24 15:59:29
amazon
amazon
Medium: curl
2015-06-18 20:48:00
archlinux
archlinux
curl: information leakage
2015-06-22 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.43.0-alt1
2015-06-19 00:00:00
mageia
mageia
Updated curl package fixes security vulnerability
2015-07-05 20:22:03
gentoo
gentoo
cURL: Multiple vulnerabilities
2015-09-24 00:00:00
slackware
slackware
[slackware-security] curl
2015-10-29 22:48:27
ibm
ibm
Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)
2020-05-01 08:19:24
securityvulns
securityvulns
cURL security vulnerabilitiies
2015-11-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.6%

JSON
Related for UB:CVE-2015-3236
prion1cve1debiancve1kaspersky1nessus6openvas5freebsd1fedora1amazon1archlinux1altlinux1mageia1gentoo1slackware1ibm1securityvulns1oracle4