Vulnerability-Lookup

RHSA-2018:3558

Vulnerability from csaf_redhat - Published: 2018-11-13 08:36 - Updated: 2026-09-21 05:35

Summary

Red Hat Security Advisory: httpd24 security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for httpd24-httpd, httpd24-nghttp2, and httpd24-curl is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module. The following packages have been upgraded to a later upstream version: httpd24-httpd (2.4.34), httpd24-curl (7.61.1). (BZ#1590833, BZ#1648928) Security Fix(es): * httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications (CVE-2018-1283) * httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS (CVE-2018-1303) * httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS (CVE-2018-1333) * httpd: DoS for HTTP/2 connections by continuous SETTINGS frames (CVE-2018-11763) * httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values (CVE-2017-15710) * httpd: <FilesMatch> bypass with a trailing newline in the file name (CVE-2017-15715) * httpd: Out of bounds access after failure in reading the HTTP request (CVE-2018-1301) * httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312) * curl: Multiple security issues were fixed in httpd24-curl (CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7141, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586, CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-7407, CVE-2017-8816, CVE-2017-8817, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000301, CVE-2018-14618) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Curl project for reporting CVE-2017-8816, CVE-2017-8817, CVE-2017-1000254, CVE-2017-1000257, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000122, CVE-2018-1000301, CVE-2016-9586, CVE-2017-1000100, CVE-2017-1000101, CVE-2018-14618, and CVE-2018-1000121. Upstream acknowledges Alex Nichols as the original reporter of CVE-2017-8816; the OSS-Fuzz project as the original reporter of CVE-2017-8817 and CVE-2018-1000301; Max Dymond as the original reporter of CVE-2017-1000254 and CVE-2018-1000122; Brian Carpenter and the OSS-Fuzz project as the original reporters of CVE-2017-1000257; Craig de Stigter as the original reporter of CVE-2018-1000007; Duy Phan Thanh as the original reporter of CVE-2018-1000120; Even Rouault as the original reporter of CVE-2017-1000100; Brian Carpenter as the original reporter of CVE-2017-1000101; Zhaoyang Wu as the original reporter of CVE-2018-14618; and Dario Weisser as the original reporter of CVE-2018-1000121. Bug Fix(es): * Previously, the Apache HTTP Server from the httpd24 Software Collection was unable to handle situations when static content was repeatedly requested in a browser by refreshing the page. As a consequence, HTTP/2 connections timed out and httpd became unresponsive. This bug has been fixed, and HTTP/2 connections now work as expected in the described scenario. (BZ#1518737) Enhancement(s): * This update adds the mod_md module to the httpd24 Software Collection. This module enables managing domains across virtual hosts and certificate provisioning using the Automatic Certificate Management Environment (ACME) protocol. The mod_md module is available only for Red Hat Enterprise Linux 7. (BZ#1640722) Additional Changes: For detailed information on changes in this release, see the Red Hat Software Collections 3.2 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2016-5419

It was found that the libcurl library did not prevent TLS session resumption when the client certificate had changed. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 336 products

Product	Version	Remediation
Unresolved product id: 6Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.aarch64	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Alt-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-devel-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-httpd-tools-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ldap-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_md-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_session-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-mod_ssl-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.4.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-devel-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-httpd-tools-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ldap-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_md-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_session-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-mod_ssl-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.5.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-curl-debuginfo-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-debuginfo-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-devel-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-httpd-tools-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libcurl-devel-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-libnghttp2-devel-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ldap-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ldap-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ldap-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_md-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_md-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_md-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_proxy_html-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_session-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_session-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_session-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ssl-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ssl-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-mod_ssl-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2-7.6.Z:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-curl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-curl-debuginfo-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-debuginfo-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-devel-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-manual-0:2.4.34-7.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-httpd-tools-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-libcurl-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-libcurl-devel-0:7.61.1-1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-libnghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-libnghttp2-devel-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-mod_ldap-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-mod_md-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-mod_proxy_html-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-mod_session-0:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-mod_ssl-1:2.4.34-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-nghttp2-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.2:httpd24-nghttp2-debuginfo-0:1.7.1-7.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2016-5420

It was found that the libcurl library did not check the client certificate when choosing the TLS connection to reuse. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

4.2 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-5421

A use-after-free flaw was found in libcurl. When invoking curl_easy_perform() after cleaning up a multi session, an application can be tricked into using libcurl to connect to a malicious server, allowing an attacker to potentially execute arbitrary code. The highest threat from this vulnerability is to data confidentiality and integrity as well as data confidentiality.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-7141

It was found that the libcurl library using the NSS (Network Security Services) library as TLS/SSL backend incorrectly re-used client certificates for subsequent TLS connections in certain cases. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

4.2 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-7167

Multiple integer overflow flaws leading to heap-based buffer overflows were found in the way curl handled escaping and unescaping of data. An attacker could potentially use these flaws to crash an application using libcurl by sending a specially crafted input to the affected libcurl functions.

2.9 (Low)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-8615

A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8616

A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-287 - Improper Authentication

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-8617

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-787 - Out-of-bounds Write

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8618

The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-416 - Use After Free

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8619

The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-416 - Use After Free

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8620

The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8621

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-8623

A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-416 - Use After Free

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2016-8624

curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-8625

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2016-9586

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-7407

The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.

2.4 (Low)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2017-8817

The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.

3.1 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2017-15710

In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-15715

In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-787 - Out-of-bounds Write

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-1000100

When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-1000101

curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.

4.2 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2017-1000254

libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2017-1000257

A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application.

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1283

It has been discovered that the mod_session module of Apache HTTP Server (httpd), through version 2.4.29, has an improper input validation flaw in the way it handles HTTP session headers in some configurations. A remote attacker may influence their content by using a "Session" header.

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1301

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2018-1303

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1312

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.

4.2 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-305 - Authentication Bypass by Primary Weakness

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2018-1333

By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-11763

In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-14618

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2018-1000007

It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities.

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1000120

It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior.

5.4 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

CWE-787 - Out-of-bounds Write

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1000121

A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldap_get_attribute_ber() function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Low

CVE-2018-1000122

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

5.4 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 336 products, the same list as for CVE-2016-5419

Threats

Impact Moderate

References

235 references

URL	Category
https://access.redhat.com/errata/RHSA-2018:3558	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1362183	external
https://bugzilla.redhat.com/show_bug.cgi?id=1362190	external
https://bugzilla.redhat.com/show_bug.cgi?id=1362199	external
https://bugzilla.redhat.com/show_bug.cgi?id=1373229	external
https://bugzilla.redhat.com/show_bug.cgi?id=1375906	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388370	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388371	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388377	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388378	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388379	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388382	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388385	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388386	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388388	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388390	external
https://bugzilla.redhat.com/show_bug.cgi?id=1388392	external
https://bugzilla.redhat.com/show_bug.cgi?id=1406712	external
https://bugzilla.redhat.com/show_bug.cgi?id=1439190	external
https://bugzilla.redhat.com/show_bug.cgi?id=1478309	external
https://bugzilla.redhat.com/show_bug.cgi?id=1478310	external
https://bugzilla.redhat.com/show_bug.cgi?id=1495541	external
https://bugzilla.redhat.com/show_bug.cgi?id=1503705	external
https://bugzilla.redhat.com/show_bug.cgi?id=1515757	external
https://bugzilla.redhat.com/show_bug.cgi?id=1515760	external
https://bugzilla.redhat.com/show_bug.cgi?id=1518737	external
https://bugzilla.redhat.com/show_bug.cgi?id=1537125	external
https://bugzilla.redhat.com/show_bug.cgi?id=1540167	external
https://bugzilla.redhat.com/show_bug.cgi?id=1552628	external
https://bugzilla.redhat.com/show_bug.cgi?id=1552631	external
https://bugzilla.redhat.com/show_bug.cgi?id=1553398	external
https://bugzilla.redhat.com/show_bug.cgi?id=1558450	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560395	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560399	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560599	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560614	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560634	external
https://bugzilla.redhat.com/show_bug.cgi?id=1560643	external
https://bugzilla.redhat.com/show_bug.cgi?id=1575536	external
https://bugzilla.redhat.com/show_bug.cgi?id=1605048	external
https://bugzilla.redhat.com/show_bug.cgi?id=1622707	external
https://bugzilla.redhat.com/show_bug.cgi?id=1628389	external
https://bugzilla.redhat.com/show_bug.cgi?id=1633260	external
https://bugzilla.redhat.com/show_bug.cgi?id=1633399	external
https://bugzilla.redhat.com/show_bug.cgi?id=1634830	external
https://bugzilla.redhat.com/show_bug.cgi?id=1640722	external
https://bugzilla.redhat.com/show_bug.cgi?id=1646937	external
https://bugzilla.redhat.com/show_bug.cgi?id=1648928	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2016-5419	self
https://bugzilla.redhat.com/show_bug.cgi?id=1362183	external
https://www.cve.org/CVERecord?id=CVE-2016-5419	external
https://nvd.nist.gov/vuln/detail/CVE-2016-5419	external
https://curl.haxx.se/docs/adv_20160803A.html	external
https://access.redhat.com/security/cve/CVE-2016-5420	self
https://bugzilla.redhat.com/show_bug.cgi?id=1362190	external
https://www.cve.org/CVERecord?id=CVE-2016-5420	external
https://nvd.nist.gov/vuln/detail/CVE-2016-5420	external
https://curl.haxx.se/docs/adv_20160803B.html	external
https://access.redhat.com/security/cve/CVE-2016-5421	self
https://bugzilla.redhat.com/show_bug.cgi?id=1362199	external
https://www.cve.org/CVERecord?id=CVE-2016-5421	external
https://nvd.nist.gov/vuln/detail/CVE-2016-5421	external
https://curl.haxx.se/docs/adv_20160803C.html	external
https://access.redhat.com/security/cve/CVE-2016-7141	self
https://bugzilla.redhat.com/show_bug.cgi?id=1373229	external
https://www.cve.org/CVERecord?id=CVE-2016-7141	external
https://nvd.nist.gov/vuln/detail/CVE-2016-7141	external
https://curl.haxx.se/docs/adv_20160907.html	external
https://access.redhat.com/security/cve/CVE-2016-7167	self
https://bugzilla.redhat.com/show_bug.cgi?id=1375906	external
https://www.cve.org/CVERecord?id=CVE-2016-7167	external
https://nvd.nist.gov/vuln/detail/CVE-2016-7167	external
https://curl.haxx.se/docs/adv_20160914.html	external
https://access.redhat.com/security/cve/CVE-2016-8615	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388370	external
https://www.cve.org/CVERecord?id=CVE-2016-8615	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8615	external
https://curl.haxx.se/docs/adv_20161102A.html	external
https://access.redhat.com/security/cve/CVE-2016-8616	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388371	external
https://www.cve.org/CVERecord?id=CVE-2016-8616	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8616	external
https://curl.haxx.se/docs/adv_20161102B.html	external
https://access.redhat.com/security/cve/CVE-2016-8617	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388377	external
https://www.cve.org/CVERecord?id=CVE-2016-8617	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8617	external
https://curl.haxx.se/docs/adv_20161102C.html	external
https://access.redhat.com/security/cve/CVE-2016-8618	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388378	external
https://www.cve.org/CVERecord?id=CVE-2016-8618	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8618	external
https://curl.haxx.se/docs/adv_20161102D.html	external
https://access.redhat.com/security/cve/CVE-2016-8619	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388379	external
https://www.cve.org/CVERecord?id=CVE-2016-8619	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8619	external
https://curl.haxx.se/docs/adv_20161102E.html	external
https://access.redhat.com/security/cve/CVE-2016-8620	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388382	external
https://www.cve.org/CVERecord?id=CVE-2016-8620	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8620	external
https://curl.haxx.se/docs/adv_20161102F.html	external
https://access.redhat.com/security/cve/CVE-2016-8621	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388385	external
https://www.cve.org/CVERecord?id=CVE-2016-8621	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8621	external
https://curl.haxx.se/docs/adv_20161102G.html	external
https://access.redhat.com/security/cve/CVE-2016-8622	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388386	external
https://www.cve.org/CVERecord?id=CVE-2016-8622	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8622	external
https://curl.haxx.se/docs/adv_20161102H.html	external
https://access.redhat.com/security/cve/CVE-2016-8623	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388388	external
https://www.cve.org/CVERecord?id=CVE-2016-8623	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8623	external
https://curl.haxx.se/docs/adv_20161102I.html	external
https://access.redhat.com/security/cve/CVE-2016-8624	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388390	external
https://www.cve.org/CVERecord?id=CVE-2016-8624	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8624	external
https://curl.haxx.se/docs/adv_20161102J.html	external
https://access.redhat.com/security/cve/CVE-2016-8625	self
https://bugzilla.redhat.com/show_bug.cgi?id=1388392	external
https://www.cve.org/CVERecord?id=CVE-2016-8625	external
https://nvd.nist.gov/vuln/detail/CVE-2016-8625	external
https://curl.haxx.se/docs/adv_20161102K.html	external
https://access.redhat.com/security/cve/CVE-2016-9586	self
https://bugzilla.redhat.com/show_bug.cgi?id=1406712	external
https://www.cve.org/CVERecord?id=CVE-2016-9586	external
https://nvd.nist.gov/vuln/detail/CVE-2016-9586	external
https://curl.haxx.se/docs/adv_20161221A.html	external
https://access.redhat.com/security/cve/CVE-2017-7407	self
https://bugzilla.redhat.com/show_bug.cgi?id=1439190	external
https://www.cve.org/CVERecord?id=CVE-2017-7407	external
https://nvd.nist.gov/vuln/detail/CVE-2017-7407	external
https://curl.haxx.se/docs/adv_20170403.html	external
https://access.redhat.com/security/cve/CVE-2017-8816	self
https://bugzilla.redhat.com/show_bug.cgi?id=1515757	external
https://www.cve.org/CVERecord?id=CVE-2017-8816	external
https://nvd.nist.gov/vuln/detail/CVE-2017-8816	external
https://curl.haxx.se/docs/adv_2017-12e7.html	external
https://access.redhat.com/security/cve/CVE-2017-8817	self
https://bugzilla.redhat.com/show_bug.cgi?id=1515760	external
https://www.cve.org/CVERecord?id=CVE-2017-8817	external
https://nvd.nist.gov/vuln/detail/CVE-2017-8817	external
https://curl.haxx.se/docs/adv_2017-ae72.html	external
https://access.redhat.com/security/cve/CVE-2017-15710	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560599	external
https://www.cve.org/CVERecord?id=CVE-2017-15710	external
https://nvd.nist.gov/vuln/detail/CVE-2017-15710	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2017-15715	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560614	external
https://www.cve.org/CVERecord?id=CVE-2017-15715	external
https://nvd.nist.gov/vuln/detail/CVE-2017-15715	external
https://access.redhat.com/security/cve/CVE-2017-1000100	self
https://bugzilla.redhat.com/show_bug.cgi?id=1478310	external
https://www.cve.org/CVERecord?id=CVE-2017-1000100	external
https://nvd.nist.gov/vuln/detail/CVE-2017-1000100	external
https://curl.haxx.se/docs/adv_20170809B.html	external
https://access.redhat.com/security/cve/CVE-2017-1000101	self
https://bugzilla.redhat.com/show_bug.cgi?id=1478309	external
https://www.cve.org/CVERecord?id=CVE-2017-1000101	external
https://nvd.nist.gov/vuln/detail/CVE-2017-1000101	external
https://curl.haxx.se/docs/adv_20170809A.html	external
https://access.redhat.com/security/cve/CVE-2017-1000254	self
https://bugzilla.redhat.com/show_bug.cgi?id=1495541	external
https://www.cve.org/CVERecord?id=CVE-2017-1000254	external
https://nvd.nist.gov/vuln/detail/CVE-2017-1000254	external
https://curl.haxx.se/docs/adv_20171004.html	external
https://access.redhat.com/security/cve/CVE-2017-1000257	self
https://bugzilla.redhat.com/show_bug.cgi?id=1503705	external
https://www.cve.org/CVERecord?id=CVE-2017-1000257	external
https://nvd.nist.gov/vuln/detail/CVE-2017-1000257	external
https://curl.haxx.se/docs/adv_20171023.html	external
https://access.redhat.com/security/cve/CVE-2018-1283	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560395	external
https://www.cve.org/CVERecord?id=CVE-2018-1283	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1283	external
https://access.redhat.com/security/cve/CVE-2018-1301	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560643	external
https://www.cve.org/CVERecord?id=CVE-2018-1301	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1301	external
https://access.redhat.com/security/cve/CVE-2018-1303	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560399	external
https://www.cve.org/CVERecord?id=CVE-2018-1303	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1303	external
https://access.redhat.com/security/cve/CVE-2018-1312	self
https://bugzilla.redhat.com/show_bug.cgi?id=1560634	external
https://www.cve.org/CVERecord?id=CVE-2018-1312	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1312	external
https://access.redhat.com/security/cve/CVE-2018-1333	self
https://bugzilla.redhat.com/show_bug.cgi?id=1605048	external
https://www.cve.org/CVERecord?id=CVE-2018-1333	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1333	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2018-11763	self
https://bugzilla.redhat.com/show_bug.cgi?id=1633399	external
https://www.cve.org/CVERecord?id=CVE-2018-11763	external
https://nvd.nist.gov/vuln/detail/CVE-2018-11763	external
https://access.redhat.com/security/cve/CVE-2018-14618	self
https://bugzilla.redhat.com/show_bug.cgi?id=1622707	external
https://www.cve.org/CVERecord?id=CVE-2018-14618	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14618	external
https://curl.haxx.se/docs/CVE-2018-14618.html	external
https://access.redhat.com/security/cve/CVE-2018-1000007	self
https://bugzilla.redhat.com/show_bug.cgi?id=1537125	external
https://www.cve.org/CVERecord?id=CVE-2018-1000007	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1000007	external
https://curl.haxx.se/docs/adv_2018-b3bf.html	external
https://access.redhat.com/security/cve/CVE-2018-1000120	self
https://bugzilla.redhat.com/show_bug.cgi?id=1552628	external
https://www.cve.org/CVERecord?id=CVE-2018-1000120	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1000120	external
https://curl.haxx.se/docs/adv_2018-9cd6.html	external
https://access.redhat.com/security/cve/CVE-2018-1000121	self
https://bugzilla.redhat.com/show_bug.cgi?id=1552631	external
https://www.cve.org/CVERecord?id=CVE-2018-1000121	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1000121	external
https://curl.haxx.se/docs/adv_2018-97a2.html	external
https://access.redhat.com/security/cve/CVE-2018-1000122	self
https://bugzilla.redhat.com/show_bug.cgi?id=1553398	external
https://www.cve.org/CVERecord?id=CVE-2018-1000122	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1000122	external
https://curl.haxx.se/docs/adv_2018-b047.html	external
https://access.redhat.com/security/cve/CVE-2018-1000301	self
https://bugzilla.redhat.com/show_bug.cgi?id=1575536	external
https://www.cve.org/CVERecord?id=CVE-2018-1000301	external
https://nvd.nist.gov/vuln/detail/CVE-2018-1000301	external
https://curl.haxx.se/docs/adv_2018-b138.html	external

Acknowledgments

the Curl project

Alex Nichols

the OSS-Fuzz project

Even Rouault

Brian Carpenter

Max Dymond

Brian Carpenter the OSS-Fuzz project

Zhaoyang Wu

Craig de Stigter

Duy Phan Thanh

Dario Weisser

JSON

To clipboard

Loading 3.3 MB of JSON…

CVE-2016-5419 (GCVE-0-2016-5419)

Vulnerability from cvelistv5 – Published: 2016-08-10 14:00 – Updated: 2024-08-06 01:01

Summary

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

19 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2575.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/92319	vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/92292	vdb-entryx_refsource_BID
https://curl.haxx.se/docs/adv_20160803A.html	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://source.android.com/security/bulletin/2016…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1038341	vdb-entryx_refsource_SECTRACK
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://www.debian.org/security/2016/dsa-3638	vendor-advisoryx_refsource_DEBIAN
http://www.securitytracker.com/id/1036538	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-3048-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-08-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:01:00.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
          },
          {
            "name": "92319",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92319"
          },
          {
            "name": "92292",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92292"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20160803A.html"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2016-12-01.html"
          },
          {
            "name": "1038341",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038341"
          },
          {
            "name": "SSA:2016-219-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
          },
          {
            "name": "DSA-3638",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3638"
          },
          {
            "name": "1036538",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036538"
          },
          {
            "name": "openSUSE-SU-2016:2227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "openSUSE-SU-2016:2379",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
          },
          {
            "name": "FEDORA-2016-24316f1f56",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "FEDORA-2016-8354baae0f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "USN-3048-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3048-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:2575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
        },
        {
          "name": "92319",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92319"
        },
        {
          "name": "92292",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92292"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://curl.haxx.se/docs/adv_20160803A.html"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2016-12-01.html"
        },
        {
          "name": "1038341",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038341"
        },
        {
          "name": "SSA:2016-219-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
        },
        {
          "name": "DSA-3638",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3638"
        },
        {
          "name": "1036538",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036538"
        },
        {
          "name": "openSUSE-SU-2016:2227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "openSUSE-SU-2016:2379",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
        },
        {
          "name": "FEDORA-2016-24316f1f56",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "FEDORA-2016-8354baae0f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "USN-3048-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3048-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-5419",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2575",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
            },
            {
              "name": "92319",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92319"
            },
            {
              "name": "92292",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92292"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20160803A.html",
              "refsource": "MISC",
              "url": "https://curl.haxx.se/docs/adv_20160803A.html"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://source.android.com/security/bulletin/2016-12-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2016-12-01.html"
            },
            {
              "name": "1038341",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038341"
            },
            {
              "name": "SSA:2016-219-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
            },
            {
              "name": "DSA-3638",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3638"
            },
            {
              "name": "1036538",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036538"
            },
            {
              "name": "openSUSE-SU-2016:2227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "openSUSE-SU-2016:2379",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
            },
            {
              "name": "FEDORA-2016-24316f1f56",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "FEDORA-2016-8354baae0f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "USN-3048-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3048-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5419",
    "datePublished": "2016-08-10T14:00:00.000Z",
    "dateReserved": "2016-06-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:01:00.484Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5420 (GCVE-0-2016-5420)

Vulnerability from cvelistv5 – Published: 2016-08-10 14:00 – Updated: 2024-08-06 01:01

Summary

curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

18 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2575.html	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/92309	vdb-entryx_refsource_BID
https://source.android.com/security/bulletin/2016…	x_refsource_CONFIRM
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://www.securitytracker.com/id/1036739	vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2016/dsa-3638	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1036537	vdb-entryx_refsource_SECTRACK
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://curl.haxx.se/docs/adv_20160803B.html	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-3048-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-08-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:01:00.390Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "name": "92309",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92309"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2016-12-01.html"
          },
          {
            "name": "SSA:2016-219-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
          },
          {
            "name": "1036739",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036739"
          },
          {
            "name": "DSA-3638",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3638"
          },
          {
            "name": "openSUSE-SU-2016:2227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "openSUSE-SU-2016:2379",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
          },
          {
            "name": "1036537",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036537"
          },
          {
            "name": "FEDORA-2016-24316f1f56",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20160803B.html"
          },
          {
            "name": "FEDORA-2016-8354baae0f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "USN-3048-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3048-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:2575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "name": "92309",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92309"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2016-12-01.html"
        },
        {
          "name": "SSA:2016-219-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
        },
        {
          "name": "1036739",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036739"
        },
        {
          "name": "DSA-3638",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3638"
        },
        {
          "name": "openSUSE-SU-2016:2227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "openSUSE-SU-2016:2379",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
        },
        {
          "name": "1036537",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036537"
        },
        {
          "name": "FEDORA-2016-24316f1f56",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://curl.haxx.se/docs/adv_20160803B.html"
        },
        {
          "name": "FEDORA-2016-8354baae0f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "USN-3048-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3048-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-5420",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2575",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "92309",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92309"
            },
            {
              "name": "https://source.android.com/security/bulletin/2016-12-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2016-12-01.html"
            },
            {
              "name": "SSA:2016-219-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
            },
            {
              "name": "1036739",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036739"
            },
            {
              "name": "DSA-3638",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3638"
            },
            {
              "name": "openSUSE-SU-2016:2227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "openSUSE-SU-2016:2379",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
            },
            {
              "name": "1036537",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036537"
            },
            {
              "name": "FEDORA-2016-24316f1f56",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20160803B.html",
              "refsource": "MISC",
              "url": "https://curl.haxx.se/docs/adv_20160803B.html"
            },
            {
              "name": "FEDORA-2016-8354baae0f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "USN-3048-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3048-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5420",
    "datePublished": "2016-08-10T14:00:00.000Z",
    "dateReserved": "2016-06-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:01:00.390Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5421 (GCVE-0-2016-5421)

Vulnerability from cvelistv5 – Published: 2016-08-10 14:00 – Updated: 2024-08-06 01:01

Summary

Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

15 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://source.android.com/security/bulletin/2016…	x_refsource_CONFIRM
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://www.securityfocus.com/bid/92306	vdb-entryx_refsource_BID
http://www.debian.org/security/2016/dsa-3638	vendor-advisoryx_refsource_DEBIAN
https://curl.haxx.se/docs/adv_20160803C.html	x_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1036536	vdb-entryx_refsource_SECTRACK
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-3048-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-08-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:01:00.161Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://source.android.com/security/bulletin/2016-12-01.html"
          },
          {
            "name": "SSA:2016-219-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
          },
          {
            "name": "92306",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92306"
          },
          {
            "name": "DSA-3638",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3638"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20160803C.html"
          },
          {
            "name": "openSUSE-SU-2016:2227",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "openSUSE-SU-2016:2379",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
          },
          {
            "name": "1036536",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036536"
          },
          {
            "name": "FEDORA-2016-24316f1f56",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "FEDORA-2016-8354baae0f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "USN-3048-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3048-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://source.android.com/security/bulletin/2016-12-01.html"
        },
        {
          "name": "SSA:2016-219-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
        },
        {
          "name": "92306",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92306"
        },
        {
          "name": "DSA-3638",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3638"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://curl.haxx.se/docs/adv_20160803C.html"
        },
        {
          "name": "openSUSE-SU-2016:2227",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "openSUSE-SU-2016:2379",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
        },
        {
          "name": "1036536",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036536"
        },
        {
          "name": "FEDORA-2016-24316f1f56",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "FEDORA-2016-8354baae0f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "USN-3048-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3048-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-5421",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://source.android.com/security/bulletin/2016-12-01.html",
              "refsource": "CONFIRM",
              "url": "https://source.android.com/security/bulletin/2016-12-01.html"
            },
            {
              "name": "SSA:2016-219-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.563059"
            },
            {
              "name": "92306",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92306"
            },
            {
              "name": "DSA-3638",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3638"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20160803C.html",
              "refsource": "MISC",
              "url": "https://curl.haxx.se/docs/adv_20160803C.html"
            },
            {
              "name": "openSUSE-SU-2016:2227",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "openSUSE-SU-2016:2379",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
            },
            {
              "name": "1036536",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036536"
            },
            {
              "name": "FEDORA-2016-24316f1f56",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "FEDORA-2016-8354baae0f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "USN-3048-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3048-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5421",
    "datePublished": "2016-08-10T14:00:00.000Z",
    "dateReserved": "2016-06-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:01:00.161Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7141 (GCVE-0-2016-7141)

Vulnerability from cvelistv5 – Published: 2016-10-03 21:00 – Updated: 2024-08-06 01:50

Summary

curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2016-2575.html	vendor-advisoryx_refsource_REDHAT
https://curl.haxx.se/docs/adv_20160907.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=1373229	x_refsource_CONFIRM
http://www.securitytracker.com/id/1036739	vdb-entryx_refsource_SECTRACK
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://github.com/curl/curl/commit/curl-7_50_2~32	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/92754	vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO

Date Public

2016-09-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.499Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:2575",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20160907.html"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1373229"
          },
          {
            "name": "1036739",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036739"
          },
          {
            "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/curl/curl/commit/curl-7_50_2~32"
          },
          {
            "name": "openSUSE-SU-2016:2379",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "92754",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92754"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2016:2575",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20160907.html"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1373229"
        },
        {
          "name": "1036739",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036739"
        },
        {
          "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/curl/curl/commit/curl-7_50_2~32"
        },
        {
          "name": "openSUSE-SU-2016:2379",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "92754",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92754"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7141",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2016:2575",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2575.html"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20160907.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20160907.html"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1373229",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1373229"
            },
            {
              "name": "1036739",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036739"
            },
            {
              "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
            },
            {
              "name": "https://github.com/curl/curl/commit/curl-7_50_2~32",
              "refsource": "CONFIRM",
              "url": "https://github.com/curl/curl/commit/curl-7_50_2~32"
            },
            {
              "name": "openSUSE-SU-2016:2379",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "92754",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92754"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7141",
    "datePublished": "2016-10-03T21:00:00.000Z",
    "dateReserved": "2016-09-05T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:50:47.499Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7167 (GCVE-0-2016-7167)

Vulnerability from cvelistv5 – Published: 2016-10-07 14:00 – Updated: 2024-08-06 01:50

Summary

Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/bid/92975	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1036813	vdb-entryx_refsource_SECTRACK
https://curl.haxx.se/docs/adv_20160914.html	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:2016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Date Public

2016-09-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.483Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-80f4f71eff",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/"
          },
          {
            "name": "SSA:2016-259-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.538632"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "name": "FEDORA-2016-08533fc59c",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3IU2FRXQNU6UJIQT4NGLWWTP2GJQXO7/"
          },
          {
            "name": "92975",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92975"
          },
          {
            "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
          },
          {
            "name": "1036813",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036813"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20160914.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2017:2016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2016"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "FEDORA-2016-7a2ed52d41",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTH54DFOS4TSYPG5XKJDGAG4XPAR4T7M/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2016-80f4f71eff",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/"
        },
        {
          "name": "SSA:2016-259-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.538632"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "name": "FEDORA-2016-08533fc59c",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3IU2FRXQNU6UJIQT4NGLWWTP2GJQXO7/"
        },
        {
          "name": "92975",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92975"
        },
        {
          "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
        },
        {
          "name": "1036813",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036813"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20160914.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "RHSA-2017:2016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2016"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "FEDORA-2016-7a2ed52d41",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTH54DFOS4TSYPG5XKJDGAG4XPAR4T7M/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7167",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2016-80f4f71eff",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/"
            },
            {
              "name": "SSA:2016-259-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.538632"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "FEDORA-2016-08533fc59c",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B3IU2FRXQNU6UJIQT4NGLWWTP2GJQXO7/"
            },
            {
              "name": "92975",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92975"
            },
            {
              "name": "[debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"
            },
            {
              "name": "1036813",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036813"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20160914.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20160914.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "RHSA-2017:2016",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2016"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "FEDORA-2016-7a2ed52d41",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTH54DFOS4TSYPG5XKJDGAG4XPAR4T7M/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7167",
    "datePublished": "2016-10-07T14:00:00.000Z",
    "dateReserved": "2016-09-08T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:50:47.483Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8615 (GCVE-0-2016-8615)

Vulnerability from cvelistv5 – Published: 2018-08-01 06:00 – Updated: 2026-04-16 13:35

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-16 13:35 UTC

CWE

CWE-99

Assigner

redhat redhat root

References

12 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/94096	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://curl.haxx.se/CVE-2016-8615.patch	x_refsource_CONFIRM
https://curl.haxx.se/docs/adv_20161102A.html	x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-21	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037192	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
https://lists.apache.org/thread.html/rf4c02775860…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r58af02e294b…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
The Curl Project	curl	Affected: 7.51.0

Date Public

2016-11-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.202Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "name": "94096",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94096"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/CVE-2016-8615.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20161102A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-21"
          },
          {
            "name": "1037192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
          },
          {
            "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-8615",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-16T13:35:21.712154Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-16T13:35:37.600Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "curl",
          "vendor": "The Curl Project",
          "versions": [
            {
              "status": "affected",
              "version": "7.51.0"
            }
          ]
        }
      ],
      "datePublic": "2016-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-99",
              "description": "CWE-99",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-29T14:08:58.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "name": "94096",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94096"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/CVE-2016-8615.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20161102A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-21"
        },
        {
          "name": "1037192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
        },
        {
          "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-8615",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.51.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The Curl Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-99"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "94096",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94096"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615"
            },
            {
              "name": "https://curl.haxx.se/CVE-2016-8615.patch",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/CVE-2016-8615.patch"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20161102A.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20161102A.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-21",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-21"
            },
            {
              "name": "1037192",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037192"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"
            },
            {
              "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8615",
    "datePublished": "2018-08-01T06:00:00.000Z",
    "dateReserved": "2016-10-12T00:00:00.000Z",
    "dateUpdated": "2026-04-16T13:35:37.600Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2016-8616 (GCVE-0-2016-8616)

Vulnerability from cvelistv5 – Published: 2018-08-01 06:00 – Updated: 2024-08-06 02:27

Summary

Severity

3.7 (Low)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-592

Assigner

redhat redhat root

References

10 references

URL	Tags
http://www.securityfocus.com/bid/94094	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://curl.haxx.se/docs/adv_20161102B.html	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://curl.haxx.se/CVE-2016-8616.patch	x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-21	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037192	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
The Curl Project	curl	Affected: 7.51.0

Date Public

2016-11-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:40.954Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "94094",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94094"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20161102B.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8616"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/CVE-2016-8616.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-21"
          },
          {
            "name": "1037192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "curl",
          "vendor": "The Curl Project",
          "versions": [
            {
              "status": "affected",
              "version": "7.51.0"
            }
          ]
        }
      ],
      "datePublic": "2016-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-592",
              "description": "CWE-592",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "94094",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94094"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20161102B.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8616"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/CVE-2016-8616.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-21"
        },
        {
          "name": "1037192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-8616",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.51.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The Curl Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an unused connection with proper credentials exists for a protocol that has connection-scoped credentials, an attacker can cause that connection to be reused if s/he knows the case-insensitive version of the correct password."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-592"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "94094",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94094"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20161102B.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20161102B.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8616",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8616"
            },
            {
              "name": "https://curl.haxx.se/CVE-2016-8616.patch",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/CVE-2016-8616.patch"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-21",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-21"
            },
            {
              "name": "1037192",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037192"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8616",
    "datePublished": "2018-08-01T06:00:00.000Z",
    "dateReserved": "2016-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:27:40.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8617 (GCVE-0-2016-8617)

Vulnerability from cvelistv5 – Published: 2018-07-31 22:00 – Updated: 2026-04-16 13:31

Summary

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

Severity

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-16 13:31 UTC

CWE

CWE-787

Assigner

redhat redhat root

References

12 references

URL	Tags
https://curl.haxx.se/docs/adv_20161102C.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://curl.haxx.se/CVE-2016-8617.patch	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94097	vdb-entryx_refsource_BID
https://www.tenable.com/security/tns-2016-21	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037192	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
https://lists.apache.org/thread.html/rf4c02775860…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r58af02e294b…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
The Curl Project	curl	Affected: 7.51.0

Date Public

2016-11-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.225Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20161102C.html"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/CVE-2016-8617.patch"
          },
          {
            "name": "94097",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94097"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-21"
          },
          {
            "name": "1037192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
          },
          {
            "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2016-8617",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-16T13:31:30.817053Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-16T13:31:37.984Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "curl",
          "vendor": "The Curl Project",
          "versions": [
            {
              "status": "affected",
              "version": "7.51.0"
            }
          ]
        }
      ],
      "datePublic": "2016-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-29T14:06:50.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20161102C.html"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/CVE-2016-8617.patch"
        },
        {
          "name": "94097",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94097"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-21"
        },
        {
          "name": "1037192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
        },
        {
          "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-8617",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.51.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The Curl Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://curl.haxx.se/docs/adv_20161102C.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20161102C.html"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://curl.haxx.se/CVE-2016-8617.patch",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/CVE-2016-8617.patch"
            },
            {
              "name": "94097",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94097"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-21",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-21"
            },
            {
              "name": "1037192",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037192"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"
            },
            {
              "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8617",
    "datePublished": "2018-07-31T22:00:00.000Z",
    "dateReserved": "2016-10-12T00:00:00.000Z",
    "dateUpdated": "2026-04-16T13:31:37.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2016-8618 (GCVE-0-2016-8618)

Vulnerability from cvelistv5 – Published: 2018-07-31 21:00 – Updated: 2024-08-06 02:27

Summary

The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.

Severity

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-416

Assigner

redhat redhat root

References

9 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-21	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037192	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://curl.haxx.se/docs/adv_20161102D.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/94098	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
The Curl Project	curl	Affected: 7.51.0

Date Public

2016-11-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.241Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-21"
          },
          {
            "name": "1037192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20161102D.html"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          },
          {
            "name": "94098",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94098"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "curl",
          "vendor": "The Curl Project",
          "versions": [
            {
              "status": "affected",
              "version": "7.51.0"
            }
          ]
        }
      ],
      "datePublic": "2016-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-21"
        },
        {
          "name": "1037192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20161102D.html"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        },
        {
          "name": "94098",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94098"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-8618",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.51.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The Curl Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-21",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-21"
            },
            {
              "name": "1037192",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037192"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://curl.haxx.se/docs/adv_20161102D.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20161102D.html"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            },
            {
              "name": "94098",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94098"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8618",
    "datePublished": "2018-07-31T21:00:00.000Z",
    "dateReserved": "2016-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:27:41.241Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-8619 (GCVE-0-2016-8619)

Vulnerability from cvelistv5 – Published: 2018-08-01 06:00 – Updated: 2024-08-06 02:27

Summary

The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

Severity

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-416

Assigner

redhat redhat root

References

10 references

URL	Tags
https://curl.haxx.se/docs/adv_20161102E.html	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3558	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://curl.haxx.se/CVE-2016-8619.patch	x_refsource_CONFIRM
http://www.securityfocus.com/bid/94100	vdb-entryx_refsource_BID
https://www.tenable.com/security/tns-2016-21	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037192	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:2486	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201701-47	vendor-advisoryx_refsource_GENTOO

Impacted products

1 product

Vendor	Product	Version
The Curl Project	curl	Affected: 7.51.0

Date Public

2016-11-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:40.965Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/docs/adv_20161102E.html"
          },
          {
            "name": "RHSA-2018:3558",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3558"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://curl.haxx.se/CVE-2016-8619.patch"
          },
          {
            "name": "94100",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94100"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-21"
          },
          {
            "name": "1037192",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037192"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2018:2486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2486"
          },
          {
            "name": "GLSA-201701-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-47"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "curl",
          "vendor": "The Curl Project",
          "versions": [
            {
              "status": "affected",
              "version": "7.51.0"
            }
          ]
        }
      ],
      "datePublic": "2016-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-13T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/docs/adv_20161102E.html"
        },
        {
          "name": "RHSA-2018:3558",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3558"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://curl.haxx.se/CVE-2016-8619.patch"
        },
        {
          "name": "94100",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94100"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-21"
        },
        {
          "name": "1037192",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037192"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "name": "RHSA-2018:2486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2486"
        },
        {
          "name": "GLSA-201701-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-47"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-8619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "7.51.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "The Curl Project"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://curl.haxx.se/docs/adv_20161102E.html",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/docs/adv_20161102E.html"
            },
            {
              "name": "RHSA-2018:3558",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3558"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619"
            },
            {
              "name": "https://curl.haxx.se/CVE-2016-8619.patch",
              "refsource": "CONFIRM",
              "url": "https://curl.haxx.se/CVE-2016-8619.patch"
            },
            {
              "name": "94100",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94100"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-21",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-21"
            },
            {
              "name": "1037192",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037192"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "RHSA-2018:2486",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2486"
            },
            {
              "name": "GLSA-201701-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-47"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-8619",
    "datePublished": "2018-08-01T06:00:00.000Z",
    "dateReserved": "2016-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:27:40.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2018:3558

CVE-2016-5419 (GCVE-0-2016-5419)

CVE-2016-5420 (GCVE-0-2016-5420)

CVE-2016-5421 (GCVE-0-2016-5421)

CVE-2016-7141 (GCVE-0-2016-7141)

CVE-2016-7167 (GCVE-0-2016-7167)

CVE-2016-8615 (GCVE-0-2016-8615)

CVE-2016-8616 (GCVE-0-2016-8616)

CVE-2016-8617 (GCVE-0-2016-8617)

CVE-2016-8618 (GCVE-0-2016-8618)

CVE-2016-8619 (GCVE-0-2016-8619)

Tags

Sightings

Nomenclature

Related by attack behaviour