https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:55:50 +0000 https://vulnerability.circl.lu/vuln/cve-2014-3707 <p>The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.</p> <p>The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.</p> https://vulnerability.circl.lu/vuln/cve-2014-3707 https://vulnerability.circl.lu/vuln/usn-2399-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl</p> <p>Symeon Paraschoudis discovered that curl incorrectly handled memory when being used with CURLOPT_COPYPOSTFIELDS and curl_easy_duphandle(). This may result in sensitive data being incorrectly sent to the remote server.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl</p> <p>Symeon Paraschoudis discovered that curl incorrectly handled memory when being used with CURLOPT_COPYPOSTFIELDS and curl_easy_duphandle(). This may result in sensitive data being incorrectly sent to the remote server.</p> https://vulnerability.circl.lu/vuln/usn-2399-1