Lucene search

CVE-2016-7141

🗓️ 03 Oct 2016 00:00:00Reported by ubuntu.comType

curl and libcurl prior to 7.50.2 with NSS and libnsspem.so allow TLS hijacking via reused client certificat

Reporter	Title	Published	Views	Family All 121
Prion	Authentication flaw	3 Oct 201621:59	–	prion
Prion	Authentication flaw	10 Aug 201614:59	–	prion
CVE	CVE-2016-7141	3 Oct 201621:59	–	cve
CVE	CVE-2016-5420	10 Aug 201614:59	–	cve
AlpineLinux	CVE-2016-7141	3 Oct 201621:59	–	alpinelinux
AlpineLinux	CVE-2016-5420	10 Aug 201614:59	–	alpinelinux
NVD	CVE-2016-7141	3 Oct 201621:59	–	nvd
NVD	CVE-2016-5420	10 Aug 201614:59	–	nvd
Cvelist	CVE-2016-7141	3 Oct 201621:00	–	cvelist
Cvelist	CVE-2016-5420	10 Aug 201614:00	–	cvelist

Source	Link
seclists	www.seclists.org/oss-sec/2016/q3/419
curl	www.curl.haxx.se/docs/adv_20160907.html
ubuntu	www.ubuntu.com/security/notices/USN-3123-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-7141
launchpad	www.launchpad.net/bugs/cve/CVE-2016-7141
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-7141

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	12.04	noarch	curl	7.22.0-3ubuntu4.17	UNKNOWN
ubuntu	14.04	noarch	curl	7.35.0-1ubuntu2.10	UNKNOWN
ubuntu	16.04	noarch	curl	7.47.0-1ubuntu2.2	UNKNOWN
ubuntu	16.10	noarch	curl	7.50.1-1ubuntu1.1	UNKNOWN
ubuntu	17.04	noarch	curl	7.50.1-1ubuntu2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Oct 2016 00:00Current

2.3Low risk

Vulners AI Score2.3

CVSS25.0

CVSS37.5

EPSS0.005

cve-2016-7141; remote attackers; authentication hijacking; tls connection; client certificate; nss; libnsspem.so; curl; libcurl; openssl; unix