SUSE-SU-2015:0962-1 - Vulnerability-Lookup

SUSE-SU-2015:0962-1

Vulnerability from csaf_suse - Published: 2014-04-15 15:50 - Updated: 2014-04-15 15:50

Summary

Security update for curl

Severity

Moderate

Notes

Title of the patch: Security update for curl

Description of the patch: This curl update fixes the following security issues: * bnc#868627: wrong re-use of connections (CVE-2014-0138). * bnc#868629: IP address wildcard certificate validation (CVE-2014-0139). * bnc#870444: --insecure option inappropriately enforcing security safeguard. Security Issue references: * CVE-2014-0138 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138> * CVE-2014-0139 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139>

Patchnames: sdksp3-curl,sledsp3-curl,slessp3-curl

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2013-2174

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2013-4545

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-0015

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-0138

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2014-0139

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-3143

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-3148

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-3153

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/824517	self
	https://bugzilla.suse.com/849596	self
	https://bugzilla.suse.com/858673	self
	https://bugzilla.suse.com/868627	self
	https://bugzilla.suse.com/868629	self
	https://bugzilla.suse.com/870444	self
	https://bugzilla.suse.com/927174	self
	https://bugzilla.suse.com/927556	self
	https://bugzilla.suse.com/927746	self
	https://bugzilla.suse.com/928533	self
	https://www.suse.com/security/cve/CVE-2013-2174/	self
	https://www.suse.com/security/cve/CVE-2013-4545/	self
	https://www.suse.com/security/cve/CVE-2014-0015/	self
	https://www.suse.com/security/cve/CVE-2014-0138/	self
	https://www.suse.com/security/cve/CVE-2014-0139/	self
	https://www.suse.com/security/cve/CVE-2015-3143/	self
	https://www.suse.com/security/cve/CVE-2015-3148/	self
	https://www.suse.com/security/cve/CVE-2015-3153/	self
	https://www.suse.com/security/cve/CVE-2013-2174	external
	https://bugzilla.suse.com/824517	external
	https://bugzilla.suse.com/917692	external
	https://www.suse.com/security/cve/CVE-2013-4545	external
	https://bugzilla.suse.com/849596	external
	https://bugzilla.suse.com/870444	external
	https://bugzilla.suse.com/880252	external
	https://bugzilla.suse.com/882520	external
	https://bugzilla.suse.com/924250	external
	https://www.suse.com/security/cve/CVE-2014-0015	external
	https://bugzilla.suse.com/858673	external
	https://bugzilla.suse.com/868627	external
	https://bugzilla.suse.com/880252	external
	https://bugzilla.suse.com/882520	external
	https://bugzilla.suse.com/927556	external
	https://bugzilla.suse.com/962983	external
	https://www.suse.com/security/cve/CVE-2014-0138	external
	https://bugzilla.suse.com/868627	external
	https://bugzilla.suse.com/880252	external
	https://bugzilla.suse.com/882520	external
	https://www.suse.com/security/cve/CVE-2014-0139	external
	https://bugzilla.suse.com/868629	external
	https://bugzilla.suse.com/880252	external
	https://bugzilla.suse.com/882520	external
	https://www.suse.com/security/cve/CVE-2015-3143	external
	https://bugzilla.suse.com/927556	external
	https://www.suse.com/security/cve/CVE-2015-3148	external
	https://bugzilla.suse.com/1092962	external
	https://bugzilla.suse.com/927746	external
	https://www.suse.com/security/cve/CVE-2015-3153	external
	https://bugzilla.suse.com/928533	external
	https://bugzilla.suse.com/951391	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for curl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis curl update fixes the following security issues:\n\n    * bnc#868627: wrong re-use of connections (CVE-2014-0138).\n    * bnc#868629: IP address wildcard certificate validation\n      (CVE-2014-0139).\n    * bnc#870444: --insecure option inappropriately enforcing security\n      safeguard.\n\nSecurity Issue references:\n\n    * CVE-2014-0138\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138\u003e\n    * CVE-2014-0139\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139\u003e\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp3-curl,sledsp3-curl,slessp3-curl",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0962-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:0962-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150962-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:0962-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001414.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 824517",
        "url": "https://bugzilla.suse.com/824517"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 849596",
        "url": "https://bugzilla.suse.com/849596"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 858673",
        "url": "https://bugzilla.suse.com/858673"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 868627",
        "url": "https://bugzilla.suse.com/868627"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 868629",
        "url": "https://bugzilla.suse.com/868629"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 870444",
        "url": "https://bugzilla.suse.com/870444"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 927174",
        "url": "https://bugzilla.suse.com/927174"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 927556",
        "url": "https://bugzilla.suse.com/927556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 927746",
        "url": "https://bugzilla.suse.com/927746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 928533",
        "url": "https://bugzilla.suse.com/928533"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-2174 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-2174/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-4545 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-4545/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0015 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0138 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0139 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3148 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3148/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3153 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3153/"
      }
    ],
    "title": "Security update for curl",
    "tracking": {
      "current_release_date": "2014-04-15T15:50:15Z",
      "generator": {
        "date": "2014-04-15T15:50:15Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:0962-1",
      "initial_release_date": "2014-04-15T15:50:15Z",
      "revision_history": [
        {
          "date": "2014-04-15T15:50:15Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcurl-devel-7.19.7-1.38.1.i586",
                "product": {
                  "name": "libcurl-devel-7.19.7-1.38.1.i586",
                  "product_id": "libcurl-devel-7.19.7-1.38.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "curl-7.19.7-1.38.1.i586",
                "product": {
                  "name": "curl-7.19.7-1.38.1.i586",
                  "product_id": "curl-7.19.7-1.38.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-7.19.7-1.38.1.i586",
                "product": {
                  "name": "libcurl4-7.19.7-1.38.1.i586",
                  "product_id": "libcurl4-7.19.7-1.38.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcurl-devel-7.19.7-1.38.1.ia64",
                "product": {
                  "name": "libcurl-devel-7.19.7-1.38.1.ia64",
                  "product_id": "libcurl-devel-7.19.7-1.38.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "curl-7.19.7-1.38.1.ia64",
                "product": {
                  "name": "curl-7.19.7-1.38.1.ia64",
                  "product_id": "curl-7.19.7-1.38.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-7.19.7-1.38.1.ia64",
                "product": {
                  "name": "libcurl4-7.19.7-1.38.1.ia64",
                  "product_id": "libcurl4-7.19.7-1.38.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-x86-7.19.7-1.38.1.ia64",
                "product": {
                  "name": "libcurl4-x86-7.19.7-1.38.1.ia64",
                  "product_id": "libcurl4-x86-7.19.7-1.38.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcurl-devel-7.19.7-1.38.1.ppc64",
                "product": {
                  "name": "libcurl-devel-7.19.7-1.38.1.ppc64",
                  "product_id": "libcurl-devel-7.19.7-1.38.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "curl-7.19.7-1.38.1.ppc64",
                "product": {
                  "name": "curl-7.19.7-1.38.1.ppc64",
                  "product_id": "curl-7.19.7-1.38.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-7.19.7-1.38.1.ppc64",
                "product": {
                  "name": "libcurl4-7.19.7-1.38.1.ppc64",
                  "product_id": "libcurl4-7.19.7-1.38.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-32bit-7.19.7-1.38.1.ppc64",
                "product": {
                  "name": "libcurl4-32bit-7.19.7-1.38.1.ppc64",
                  "product_id": "libcurl4-32bit-7.19.7-1.38.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcurl-devel-7.19.7-1.38.1.s390x",
                "product": {
                  "name": "libcurl-devel-7.19.7-1.38.1.s390x",
                  "product_id": "libcurl-devel-7.19.7-1.38.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "curl-7.19.7-1.38.1.s390x",
                "product": {
                  "name": "curl-7.19.7-1.38.1.s390x",
                  "product_id": "curl-7.19.7-1.38.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-7.19.7-1.38.1.s390x",
                "product": {
                  "name": "libcurl4-7.19.7-1.38.1.s390x",
                  "product_id": "libcurl4-7.19.7-1.38.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-32bit-7.19.7-1.38.1.s390x",
                "product": {
                  "name": "libcurl4-32bit-7.19.7-1.38.1.s390x",
                  "product_id": "libcurl4-32bit-7.19.7-1.38.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libcurl-devel-7.19.7-1.38.1.x86_64",
                "product": {
                  "name": "libcurl-devel-7.19.7-1.38.1.x86_64",
                  "product_id": "libcurl-devel-7.19.7-1.38.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "curl-7.19.7-1.38.1.x86_64",
                "product": {
                  "name": "curl-7.19.7-1.38.1.x86_64",
                  "product_id": "curl-7.19.7-1.38.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-7.19.7-1.38.1.x86_64",
                "product": {
                  "name": "libcurl4-7.19.7-1.38.1.x86_64",
                  "product_id": "libcurl4-7.19.7-1.38.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
                "product": {
                  "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
                  "product_id": "libcurl4-32bit-7.19.7-1.38.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 11 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sled:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl-devel-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586"
        },
        "product_reference": "libcurl-devel-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl-devel-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl-devel-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl-devel-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl-devel-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl-devel-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl-devel-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl-devel-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl-devel-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586"
        },
        "product_reference": "curl-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "curl-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586"
        },
        "product_reference": "curl-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x"
        },
        "product_reference": "curl-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "curl-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
          "product_id": "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-x86-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586"
        },
        "product_reference": "curl-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x"
        },
        "product_reference": "curl-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "curl-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-x86-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586"
        },
        "product_reference": "curl-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "curl-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x"
        },
        "product_reference": "curl-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "curl-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "curl-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-32bit-7.19.7-1.38.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64"
        },
        "product_reference": "libcurl4-32bit-7.19.7-1.38.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcurl4-x86-7.19.7-1.38.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64"
        },
        "product_reference": "libcurl4-x86-7.19.7-1.38.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-2174",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-2174"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a \"%\" (percent) character.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-2174",
          "url": "https://www.suse.com/security/cve/CVE-2013-2174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 824517 for CVE-2013-2174",
          "url": "https://bugzilla.suse.com/824517"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917692 for CVE-2013-2174",
          "url": "https://bugzilla.suse.com/917692"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-2174"
    },
    {
      "cve": "CVE-2013-4545",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-4545"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-4545",
          "url": "https://www.suse.com/security/cve/CVE-2013-4545"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 849596 for CVE-2013-4545",
          "url": "https://bugzilla.suse.com/849596"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 870444 for CVE-2013-4545",
          "url": "https://bugzilla.suse.com/870444"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880252 for CVE-2013-4545",
          "url": "https://bugzilla.suse.com/880252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882520 for CVE-2013-4545",
          "url": "https://bugzilla.suse.com/882520"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924250 for CVE-2013-4545",
          "url": "https://bugzilla.suse.com/924250"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-4545"
    },
    {
      "cve": "CVE-2014-0015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0015",
          "url": "https://www.suse.com/security/cve/CVE-2014-0015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 858673 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/858673"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868627 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/868627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880252 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/880252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882520 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/882520"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927556 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/927556"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962983 for CVE-2014-0015",
          "url": "https://bugzilla.suse.com/962983"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-0015"
    },
    {
      "cve": "CVE-2014-0138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0138",
          "url": "https://www.suse.com/security/cve/CVE-2014-0138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868627 for CVE-2014-0138",
          "url": "https://bugzilla.suse.com/868627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880252 for CVE-2014-0138",
          "url": "https://bugzilla.suse.com/880252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882520 for CVE-2014-0138",
          "url": "https://bugzilla.suse.com/882520"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0138"
    },
    {
      "cve": "CVE-2014-0139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject\u0027s Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0139",
          "url": "https://www.suse.com/security/cve/CVE-2014-0139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868629 for CVE-2014-0139",
          "url": "https://bugzilla.suse.com/868629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 880252 for CVE-2014-0139",
          "url": "https://bugzilla.suse.com/880252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 882520 for CVE-2014-0139",
          "url": "https://bugzilla.suse.com/882520"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-0139"
    },
    {
      "cve": "CVE-2015-3143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3143",
          "url": "https://www.suse.com/security/cve/CVE-2015-3143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927556 for CVE-2015-3143",
          "url": "https://bugzilla.suse.com/927556"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3143"
    },
    {
      "cve": "CVE-2015-3148",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3148"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3148",
          "url": "https://www.suse.com/security/cve/CVE-2015-3148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1092962 for CVE-2015-3148",
          "url": "https://bugzilla.suse.com/1092962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927746 for CVE-2015-3148",
          "url": "https://bugzilla.suse.com/927746"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3148"
    },
    {
      "cve": "CVE-2015-3153",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3153"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3153",
          "url": "https://www.suse.com/security/cve/CVE-2015-3153"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928533 for CVE-2015-3153",
          "url": "https://bugzilla.suse.com/928533"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951391 for CVE-2015-3153",
          "url": "https://bugzilla.suse.com/951391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:curl-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-32bit-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-7.19.7-1.38.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP3:libcurl4-x86-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP3:libcurl-devel-7.19.7-1.38.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-04-15T15:50:15Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3153"
    }
  ]
}

CVE-2013-2174 (GCVE-0-2013-2174)

Vulnerability from cvelistv5 – Published: 2013-07-31 10:00 – Updated: 2024-08-06 15:27

Summary

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2013-0…	vendor-advisoryx_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-0983.html	vendor-advisoryx_refsource_REDHAT
	https://github.com/bagder/curl/commit/192c4f788d4…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/60737	vdb-entryx_refsource_BID
	http://www.ubuntu.com/usn/USN-1894-1	vendor-advisoryx_refsource_UBUNTU
	http://www.debian.org/security/2013/dsa-2713	vendor-advisoryx_refsource_DEBIAN
	http://curl.haxx.se/docs/adv_20130622.html	x_refsource_CONFIRM

Date Public ?

2013-05-19 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:27:41.030Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "openSUSE-SU-2013:1133",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-07/msg00013.html"
          },
          {
            "name": "RHSA-2013:0983",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0983.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737"
          },
          {
            "name": "60737",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/60737"
          },
          {
            "name": "USN-1894-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1894-1"
          },
          {
            "name": "DSA-2713",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2713"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20130622.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a \"%\" (percent) character."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "openSUSE-SU-2013:1133",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-07/msg00013.html"
        },
        {
          "name": "RHSA-2013:0983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0983.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737"
        },
        {
          "name": "60737",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/60737"
        },
        {
          "name": "USN-1894-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1894-1"
        },
        {
          "name": "DSA-2713",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2713"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20130622.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-2174",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a \"%\" (percent) character."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "openSUSE-SU-2013:1133",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-07/msg00013.html"
            },
            {
              "name": "RHSA-2013:0983",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0983.html"
            },
            {
              "name": "https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737",
              "refsource": "CONFIRM",
              "url": "https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737"
            },
            {
              "name": "60737",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/60737"
            },
            {
              "name": "USN-1894-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1894-1"
            },
            {
              "name": "DSA-2713",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2713"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20130622.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20130622.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-2174",
    "datePublished": "2013-07-31T10:00:00.000Z",
    "dateReserved": "2013-02-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T15:27:41.030Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3153 (GCVE-0-2015-3153)

Vulnerability from cvelistv5 – Published: 2015-05-01 15:00 – Updated: 2024-08-06 05:39

Summary

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1032233	vdb-entryx_refsource_SECTRACK
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2591-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
	http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/74408	vdb-entryx_refsource_BID
	http://curl.haxx.se/docs/adv_20150429.html	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3240	vendor-advisoryx_refsource_DEBIAN

Date Public ?

2015-04-29 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.633Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10131"
          },
          {
            "name": "1032233",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032233"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
          },
          {
            "name": "USN-2591-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2591-1"
          },
          {
            "name": "openSUSE-SU-2015:0861",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "74408",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74408"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20150429.html"
          },
          {
            "name": "DSA-3240",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3240"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10131"
        },
        {
          "name": "1032233",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032233"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
        },
        {
          "name": "USN-2591-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2591-1"
        },
        {
          "name": "openSUSE-SU-2015:0861",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "74408",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74408"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20150429.html"
        },
        {
          "name": "DSA-3240",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3240"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3153",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10131",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10131"
            },
            {
              "name": "1032233",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032233"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
            },
            {
              "name": "USN-2591-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2591-1"
            },
            {
              "name": "openSUSE-SU-2015:0861",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "74408",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74408"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20150429.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20150429.html"
            },
            {
              "name": "DSA-3240",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3240"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3153",
    "datePublished": "2015-05-01T15:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0015 (GCVE-0-2014-0015)

Vulnerability from cvelistv5 – Published: 2014-02-02 00:00 – Updated: 2024-08-06 08:58

Summary

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/56912	third-party-advisoryx_refsource_SECUNIA
	http://www-947.ibm.com/support/entry/portal/docdi…	x_refsource_CONFIRM
	http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://support.apple.com/kb/HT6296	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1029710	vdb-entryx_refsource_SECTRACK
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
	http://archives.neohapsis.com/archives/bugtraq/20…	vendor-advisoryx_refsource_APPLE
	http://www.securityfocus.com/archive/1/534161/100…	mailing-listx_refsource_BUGTRAQ
	http://www.securityfocus.com/bid/65270	vdb-entryx_refsource_BID
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2849	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/59458	third-party-advisoryx_refsource_SECUNIA
	http://seclists.org/fulldisclosure/2014/Dec/23	mailing-listx_refsource_FULLDISC
	http://secunia.com/advisories/56728	third-party-advisoryx_refsource_SECUNIA
	http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://secunia.com/advisories/59475	third-party-advisoryx_refsource_SECUNIA
	http://curl.haxx.se/docs/adv_20140129.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2097-1	vendor-advisoryx_refsource_UBUNTU
	http://secunia.com/advisories/56734	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/56731	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2014-01-31 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:58:26.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "56912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56912"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
          },
          {
            "name": "SSA:2014-044-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2014\u0026m=slackware-security.502652"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT6296"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
          },
          {
            "name": "1029710",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1029710"
          },
          {
            "name": "FEDORA-2014-1876",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html"
          },
          {
            "name": "openSUSE-SU-2014:0274",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html"
          },
          {
            "name": "APPLE-SA-2014-06-30-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
          },
          {
            "name": "65270",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65270"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "name": "DSA-2849",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2849"
          },
          {
            "name": "59458",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59458"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
          },
          {
            "name": "56728",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56728"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "FEDORA-2014-1864",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html"
          },
          {
            "name": "59475",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59475"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20140129.html"
          },
          {
            "name": "USN-2097-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2097-1"
          },
          {
            "name": "56734",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56734"
          },
          {
            "name": "56731",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/56731"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "56912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56912"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
        },
        {
          "name": "SSA:2014-044-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2014\u0026m=slackware-security.502652"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT6296"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
        },
        {
          "name": "1029710",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1029710"
        },
        {
          "name": "FEDORA-2014-1876",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html"
        },
        {
          "name": "openSUSE-SU-2014:0274",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html"
        },
        {
          "name": "APPLE-SA-2014-06-30-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
        },
        {
          "name": "65270",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65270"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "name": "DSA-2849",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2849"
        },
        {
          "name": "59458",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59458"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
        },
        {
          "name": "56728",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56728"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "FEDORA-2014-1864",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html"
        },
        {
          "name": "59475",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59475"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20140129.html"
        },
        {
          "name": "USN-2097-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2097-1"
        },
        {
          "name": "56734",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56734"
        },
        {
          "name": "56731",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/56731"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0015",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "56912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56912"
            },
            {
              "name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862",
              "refsource": "CONFIRM",
              "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
            },
            {
              "name": "SSA:2014-044-01",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2014\u0026m=slackware-security.502652"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "http://support.apple.com/kb/HT6296",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT6296"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
            },
            {
              "name": "1029710",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1029710"
            },
            {
              "name": "FEDORA-2014-1876",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html"
            },
            {
              "name": "openSUSE-SU-2014:0274",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html"
            },
            {
              "name": "APPLE-SA-2014-06-30-2",
              "refsource": "APPLE",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
            },
            {
              "name": "65270",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65270"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "DSA-2849",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2849"
            },
            {
              "name": "59458",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59458"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
            },
            {
              "name": "56728",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56728"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
            },
            {
              "name": "FEDORA-2014-1864",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html"
            },
            {
              "name": "59475",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59475"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20140129.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20140129.html"
            },
            {
              "name": "USN-2097-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2097-1"
            },
            {
              "name": "56734",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56734"
            },
            {
              "name": "56731",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/56731"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0015",
    "datePublished": "2014-02-02T00:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:58:26.535Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-4545 (GCVE-0-2013-4545)

Vulnerability from cvelistv5 – Published: 2013-11-23 11:00 – Updated: 2024-08-06 16:45

Summary

cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	https://h20564.www2.hp.com/hpsc/doc/public/displa…	vendor-advisoryx_refsource_HP
	http://curl.haxx.se/docs/adv_20131115.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.debian.org/security/2013/dsa-2798	vendor-advisoryx_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-updates/2013-1…	vendor-advisoryx_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2048-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-updates/2013-1…	vendor-advisoryx_refsource_SUSE

Date Public ?

2013-11-15 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:45:14.830Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "HPSBMU03112",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20131115.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
          },
          {
            "name": "DSA-2798",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2798"
          },
          {
            "name": "openSUSE-SU-2013:1859",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html"
          },
          {
            "name": "USN-2048-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2048-1"
          },
          {
            "name": "openSUSE-SU-2013:1865",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-11-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-15T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "HPSBMU03112",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20131115.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
        },
        {
          "name": "DSA-2798",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2798"
        },
        {
          "name": "openSUSE-SU-2013:1859",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html"
        },
        {
          "name": "USN-2048-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2048-1"
        },
        {
          "name": "openSUSE-SU-2013:1865",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-4545",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "HPSBMU03112",
              "refsource": "HP",
              "url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20131115.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20131115.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html"
            },
            {
              "name": "DSA-2798",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2798"
            },
            {
              "name": "openSUSE-SU-2013:1859",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html"
            },
            {
              "name": "USN-2048-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2048-1"
            },
            {
              "name": "openSUSE-SU-2013:1865",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4545",
    "datePublished": "2013-11-23T11:00:00.000Z",
    "dateReserved": "2013-06-12T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:45:14.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3143 (GCVE-0-2015-3143)

Vulnerability from cvelistv5 – Published: 2015-04-24 14:00 – Updated: 2024-08-06 05:39

Summary

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://marc.info/?l=bugtraq&m=145612005512270&w=2	vendor-advisoryx_refsource_HP
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://curl.haxx.se/docs/adv_20150422A.html	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3232	vendor-advisoryx_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-2591-1	vendor-advisoryx_refsource_UBUNTU
	http://www.securitytracker.com/id/1032232	vdb-entryx_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://www.securityfocus.com/bid/74299	vdb-entryx_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-1254.html	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
	http://advisories.mageia.org/MGASA-2015-0179.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
	https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201509-02	vendor-advisoryx_refsource_GENTOO
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public ?

2015-04-22 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.921Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBHF03544",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
          },
          {
            "name": "FEDORA-2015-6853",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20150422A.html"
          },
          {
            "name": "DSA-3232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3232"
          },
          {
            "name": "FEDORA-2015-6712",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "MDVSA-2015:219",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
          },
          {
            "name": "USN-2591-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2591-1"
          },
          {
            "name": "1032232",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032232"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "74299",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74299"
          },
          {
            "name": "RHSA-2015:1254",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
          },
          {
            "name": "MDVSA-2015:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
          },
          {
            "name": "openSUSE-SU-2015:0799",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "GLSA-201509-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201509-02"
          },
          {
            "name": "FEDORA-2015-6728",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
          },
          {
            "name": "FEDORA-2015-6695",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
          },
          {
            "name": "FEDORA-2015-6864",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBHF03544",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
        },
        {
          "name": "FEDORA-2015-6853",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20150422A.html"
        },
        {
          "name": "DSA-3232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3232"
        },
        {
          "name": "FEDORA-2015-6712",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "MDVSA-2015:219",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
        },
        {
          "name": "USN-2591-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2591-1"
        },
        {
          "name": "1032232",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032232"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "74299",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74299"
        },
        {
          "name": "RHSA-2015:1254",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
        },
        {
          "name": "MDVSA-2015:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
        },
        {
          "name": "openSUSE-SU-2015:0799",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "GLSA-201509-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201509-02"
        },
        {
          "name": "FEDORA-2015-6728",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
        },
        {
          "name": "FEDORA-2015-6695",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
        },
        {
          "name": "FEDORA-2015-6864",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3143",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBHF03544",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
            },
            {
              "name": "FEDORA-2015-6853",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20150422A.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20150422A.html"
            },
            {
              "name": "DSA-3232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3232"
            },
            {
              "name": "FEDORA-2015-6712",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "MDVSA-2015:219",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
            },
            {
              "name": "USN-2591-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2591-1"
            },
            {
              "name": "1032232",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032232"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "74299",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74299"
            },
            {
              "name": "RHSA-2015:1254",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
            },
            {
              "name": "MDVSA-2015:220",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
            },
            {
              "name": "openSUSE-SU-2015:0799",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0179.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "GLSA-201509-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201509-02"
            },
            {
              "name": "FEDORA-2015-6728",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
            },
            {
              "name": "FEDORA-2015-6695",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
            },
            {
              "name": "FEDORA-2015-6864",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3143",
    "datePublished": "2015-04-24T14:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.921Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-3148 (GCVE-0-2015-3148)

Vulnerability from cvelistv5 – Published: 2015-04-24 14:00 – Updated: 2024-08-06 05:39

Summary

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://marc.info/?l=bugtraq&m=145612005512270&w=2	vendor-advisoryx_refsource_HP
	http://curl.haxx.se/docs/adv_20150422B.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.debian.org/security/2015/dsa-3232	vendor-advisoryx_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.securityfocus.com/bid/74301	vdb-entryx_refsource_BID
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-2591-1	vendor-advisoryx_refsource_UBUNTU
	http://www.securitytracker.com/id/1032232	vdb-entryx_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
	http://rhn.redhat.com/errata/RHSA-2015-1254.html	vendor-advisoryx_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
	http://advisories.mageia.org/MGASA-2015-0179.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
	https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201509-02	vendor-advisoryx_refsource_GENTOO
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public ?

2015-04-22 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBHF03544",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20150422B.html"
          },
          {
            "name": "FEDORA-2015-6853",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
          },
          {
            "name": "DSA-3232",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3232"
          },
          {
            "name": "FEDORA-2015-6712",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
          },
          {
            "name": "74301",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74301"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "MDVSA-2015:219",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
          },
          {
            "name": "USN-2591-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2591-1"
          },
          {
            "name": "1032232",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032232"
          },
          {
            "name": "APPLE-SA-2015-08-13-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
          },
          {
            "name": "RHSA-2015:1254",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
          },
          {
            "name": "MDVSA-2015:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "openSUSE-SU-2015:0799",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT205031"
          },
          {
            "name": "GLSA-201509-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201509-02"
          },
          {
            "name": "FEDORA-2015-6728",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
          },
          {
            "name": "FEDORA-2015-6695",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
          },
          {
            "name": "FEDORA-2015-6864",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBHF03544",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20150422B.html"
        },
        {
          "name": "FEDORA-2015-6853",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
        },
        {
          "name": "DSA-3232",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3232"
        },
        {
          "name": "FEDORA-2015-6712",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
        },
        {
          "name": "74301",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74301"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "MDVSA-2015:219",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
        },
        {
          "name": "USN-2591-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2591-1"
        },
        {
          "name": "1032232",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032232"
        },
        {
          "name": "APPLE-SA-2015-08-13-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
        },
        {
          "name": "RHSA-2015:1254",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
        },
        {
          "name": "MDVSA-2015:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "openSUSE-SU-2015:0799",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT205031"
        },
        {
          "name": "GLSA-201509-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201509-02"
        },
        {
          "name": "FEDORA-2015-6728",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
        },
        {
          "name": "FEDORA-2015-6695",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
        },
        {
          "name": "FEDORA-2015-6864",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3148",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBHF03544",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=145612005512270\u0026w=2"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20150422B.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20150422B.html"
            },
            {
              "name": "FEDORA-2015-6853",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html"
            },
            {
              "name": "DSA-3232",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3232"
            },
            {
              "name": "FEDORA-2015-6712",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html"
            },
            {
              "name": "74301",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74301"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "MDVSA-2015:219",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:219"
            },
            {
              "name": "USN-2591-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2591-1"
            },
            {
              "name": "1032232",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032232"
            },
            {
              "name": "APPLE-SA-2015-08-13-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html"
            },
            {
              "name": "RHSA-2015:1254",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1254.html"
            },
            {
              "name": "MDVSA-2015:220",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:220"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10743"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
            },
            {
              "name": "openSUSE-SU-2015:0799",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00057.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0179.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0179.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
            },
            {
              "name": "https://support.apple.com/kb/HT205031",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT205031"
            },
            {
              "name": "GLSA-201509-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201509-02"
            },
            {
              "name": "FEDORA-2015-6728",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html"
            },
            {
              "name": "FEDORA-2015-6695",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html"
            },
            {
              "name": "FEDORA-2015-6864",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156945.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3148",
    "datePublished": "2015-04-24T14:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.988Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0138 (GCVE-0-2014-0138)

Vulnerability from cvelistv5 – Published: 2014-04-15 14:00 – Updated: 2024-08-06 09:05

Summary

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www-947.ibm.com/support/entry/portal/docdi…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://curl.haxx.se/docs/adv_20140326A.html	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
	http://secunia.com/advisories/57836	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/534161/100…	mailing-listx_refsource_BUGTRAQ
	http://www.debian.org/security/2014/dsa-2902	vendor-advisoryx_refsource_DEBIAN
	http://www.getchef.com/blog/2014/04/09/chef-serve…	x_refsource_CONFIRM
	http://secunia.com/advisories/59458	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/58615	third-party-advisoryx_refsource_SECUNIA
	http://seclists.org/fulldisclosure/2014/Dec/23	mailing-listx_refsource_FULLDISC
	http://secunia.com/advisories/57968	third-party-advisoryx_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2167-1	vendor-advisoryx_refsource_UBUNTU
	http://www.getchef.com/blog/2014/04/09/enterprise…	x_refsource_CONFIRM
	http://www.getchef.com/blog/2014/04/09/enterprise…	x_refsource_CONFIRM
	http://secunia.com/advisories/57966	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2014-03-26 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:38.827Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20140326A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
          },
          {
            "name": "57836",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57836"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
          },
          {
            "name": "DSA-2902",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
          },
          {
            "name": "59458",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59458"
          },
          {
            "name": "openSUSE-SU-2014:0530",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
          },
          {
            "name": "58615",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58615"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
          },
          {
            "name": "57968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
          },
          {
            "name": "USN-2167-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2167-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
          },
          {
            "name": "57966",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57966"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20140326A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
        },
        {
          "name": "57836",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57836"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
        },
        {
          "name": "DSA-2902",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
        },
        {
          "name": "59458",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59458"
        },
        {
          "name": "openSUSE-SU-2014:0530",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
        },
        {
          "name": "58615",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58615"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
        },
        {
          "name": "57968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
        },
        {
          "name": "USN-2167-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2167-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
        },
        {
          "name": "57966",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57966"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0138",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862",
              "refsource": "CONFIRM",
              "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20140326A.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20140326A.html"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
            },
            {
              "name": "57836",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57836"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
            },
            {
              "name": "DSA-2902",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2902"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
            },
            {
              "name": "59458",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59458"
            },
            {
              "name": "openSUSE-SU-2014:0530",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
            },
            {
              "name": "58615",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58615"
            },
            {
              "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
            },
            {
              "name": "57968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57968"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
            },
            {
              "name": "USN-2167-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2167-1"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
            },
            {
              "name": "57966",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57966"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0138",
    "datePublished": "2014-04-15T14:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:38.827Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0139 (GCVE-0-2014-0139)

Vulnerability from cvelistv5 – Published: 2014-04-15 14:00 – Updated: 2024-08-06 09:05

Summary

cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www-947.ibm.com/support/entry/portal/docdi…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://secunia.com/advisories/57836	third-party-advisoryx_refsource_SECUNIA
	http://curl.haxx.se/docs/adv_20140326B.html	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-2902	vendor-advisoryx_refsource_DEBIAN
	http://www.getchef.com/blog/2014/04/09/chef-serve…	x_refsource_CONFIRM
	http://secunia.com/advisories/59458	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-updates/2014-0…	vendor-advisoryx_refsource_SUSE
	http://advisories.mageia.org/MGASA-2015-0165.html	x_refsource_CONFIRM
	http://secunia.com/advisories/58615	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/57968	third-party-advisoryx_refsource_SECUNIA
	http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2167-1	vendor-advisoryx_refsource_UBUNTU
	http://www.getchef.com/blog/2014/04/09/enterprise…	x_refsource_CONFIRM
	http://www.getchef.com/blog/2014/04/09/enterprise…	x_refsource_CONFIRM
	http://secunia.com/advisories/57966	third-party-advisoryx_refsource_SECUNIA

Date Public ?

2014-03-26 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:38.790Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "MDVSA-2015:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:213"
          },
          {
            "name": "57836",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57836"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://curl.haxx.se/docs/adv_20140326B.html"
          },
          {
            "name": "DSA-2902",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
          },
          {
            "name": "59458",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59458"
          },
          {
            "name": "openSUSE-SU-2014:0530",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2015-0165.html"
          },
          {
            "name": "58615",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58615"
          },
          {
            "name": "57968",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57968"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
          },
          {
            "name": "USN-2167-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2167-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
          },
          {
            "name": "57966",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57966"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject\u0027s Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-15T17:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "MDVSA-2015:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:213"
        },
        {
          "name": "57836",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57836"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://curl.haxx.se/docs/adv_20140326B.html"
        },
        {
          "name": "DSA-2902",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
        },
        {
          "name": "59458",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59458"
        },
        {
          "name": "openSUSE-SU-2014:0530",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2015-0165.html"
        },
        {
          "name": "58615",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58615"
        },
        {
          "name": "57968",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57968"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
        },
        {
          "name": "USN-2167-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2167-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
        },
        {
          "name": "57966",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57966"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0139",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject\u0027s Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862",
              "refsource": "CONFIRM",
              "url": "http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "MDVSA-2015:213",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:213"
            },
            {
              "name": "57836",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57836"
            },
            {
              "name": "http://curl.haxx.se/docs/adv_20140326B.html",
              "refsource": "CONFIRM",
              "url": "http://curl.haxx.se/docs/adv_20140326B.html"
            },
            {
              "name": "DSA-2902",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2014/dsa-2902"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/"
            },
            {
              "name": "59458",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59458"
            },
            {
              "name": "openSUSE-SU-2014:0530",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2015-0165.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2015-0165.html"
            },
            {
              "name": "58615",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/58615"
            },
            {
              "name": "57968",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57968"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675820"
            },
            {
              "name": "USN-2167-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2167-1"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/"
            },
            {
              "name": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/",
              "refsource": "CONFIRM",
              "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/"
            },
            {
              "name": "57966",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/57966"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0139",
    "datePublished": "2014-04-15T14:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:05:38.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.