| 0 |
| url |
VCID-1y6d-7vfu-ybb3 |
| vulnerability_id |
VCID-1y6d-7vfu-ybb3 |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8620
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| url |
VCID-2u6v-6vm9-z3by |
| vulnerability_id |
VCID-2u6v-6vm9-z3by |
| summary |
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-3707
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2u6v-6vm9-z3by |
|
| 2 |
|
| 3 |
|
| 4 |
| url |
VCID-51ac-1jc2-vfed |
| vulnerability_id |
VCID-51ac-1jc2-vfed |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8622
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-51ac-1jc2-vfed |
|
| 5 |
| url |
VCID-5svr-3vv9-mqea |
| vulnerability_id |
VCID-5svr-3vv9-mqea |
| summary |
When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
|
| aliases |
CVE-2017-1000100
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5svr-3vv9-mqea |
|
| 6 |
| url |
VCID-5xjw-u8ad-n3g5 |
| vulnerability_id |
VCID-5xjw-u8ad-n3g5 |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8615
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5xjw-u8ad-n3g5 |
|
| 7 |
| url |
VCID-6745-tyba-33fa |
| vulnerability_id |
VCID-6745-tyba-33fa |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
| 2 |
|
|
| aliases |
CVE-2018-1000301
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6745-tyba-33fa |
|
| 8 |
| url |
VCID-7jrx-ykk8-h3gp |
| vulnerability_id |
VCID-7jrx-ykk8-h3gp |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
| 2 |
|
|
| aliases |
CVE-2017-8817
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7jrx-ykk8-h3gp |
|
| 9 |
| url |
VCID-8j6v-xbhy-7uc2 |
| vulnerability_id |
VCID-8j6v-xbhy-7uc2 |
| summary |
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2015-3143
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8j6v-xbhy-7uc2 |
|
| 10 |
| url |
VCID-av4f-gxku-qbhp |
| vulnerability_id |
VCID-av4f-gxku-qbhp |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8624
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-av4f-gxku-qbhp |
|
| 11 |
|
| 12 |
| url |
VCID-cmcn-f8ws-q3h2 |
| vulnerability_id |
VCID-cmcn-f8ws-q3h2 |
| summary |
The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2013-6422
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cmcn-f8ws-q3h2 |
|
| 13 |
|
| 14 |
| url |
VCID-e4qf-7gqs-qyg3 |
| vulnerability_id |
VCID-e4qf-7gqs-qyg3 |
| summary |
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-0015
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e4qf-7gqs-qyg3 |
|
| 15 |
| url |
VCID-f8vu-23bb-5ue7 |
| vulnerability_id |
VCID-f8vu-23bb-5ue7 |
| summary |
arbitrary code execution |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
| 2 |
|
|
| aliases |
CVE-2017-8816
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f8vu-23bb-5ue7 |
|
| 16 |
| url |
VCID-f922-jx9w-mbc5 |
| vulnerability_id |
VCID-f922-jx9w-mbc5 |
| summary |
CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-8150
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f922-jx9w-mbc5 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
| url |
VCID-hhu3-dp3m-gbgm |
| vulnerability_id |
VCID-hhu3-dp3m-gbgm |
| summary |
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2013-2174
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu3-dp3m-gbgm |
|
| 21 |
|
| 22 |
|
| 23 |
| url |
VCID-nkmd-xb13-mbg9 |
| vulnerability_id |
VCID-nkmd-xb13-mbg9 |
| summary |
cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2013-4545
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nkmd-xb13-mbg9 |
|
| 24 |
|
| 25 |
| url |
VCID-p9v4-nweu-vydg |
| vulnerability_id |
VCID-p9v4-nweu-vydg |
| summary |
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
|
| aliases |
CVE-2015-3148
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p9v4-nweu-vydg |
|
| 26 |
|
| 27 |
| url |
VCID-q9ht-ra39-kuef |
| vulnerability_id |
VCID-q9ht-ra39-kuef |
| summary |
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-0138
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q9ht-ra39-kuef |
|
| 28 |
| url |
VCID-qe9z-wuze-tucq |
| vulnerability_id |
VCID-qe9z-wuze-tucq |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8616
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qe9z-wuze-tucq |
|
| 29 |
|
| 30 |
| url |
VCID-rt5e-saz2-j7c9 |
| vulnerability_id |
VCID-rt5e-saz2-j7c9 |
| summary |
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
|
| aliases |
CVE-2018-1000007
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rt5e-saz2-j7c9 |
|
| 31 |
| url |
VCID-sesh-938m-x3f8 |
| vulnerability_id |
VCID-sesh-938m-x3f8 |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8618
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sesh-938m-x3f8 |
|
| 32 |
| url |
VCID-snsg-c2up-b7cn |
| vulnerability_id |
VCID-snsg-c2up-b7cn |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8623
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-snsg-c2up-b7cn |
|
| 33 |
| url |
VCID-swmn-7ns9-ekg1 |
| vulnerability_id |
VCID-swmn-7ns9-ekg1 |
| summary |
An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
|
| aliases |
CVE-2017-1000257
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-swmn-7ns9-ekg1 |
|
| 34 |
|
| 35 |
| url |
VCID-tyqp-e8cp-dbbm |
| vulnerability_id |
VCID-tyqp-e8cp-dbbm |
| summary |
cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-0139
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tyqp-e8cp-dbbm |
|
| 36 |
|
| 37 |
| url |
VCID-uh5a-zcds-3bcc |
| vulnerability_id |
VCID-uh5a-zcds-3bcc |
| summary |
cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| purl |
pkg:deb/debian/curl@7.26.0-1%2Bwheezy13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5svr-3vv9-mqea |
|
| 5 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 6 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 7 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 8 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 9 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 10 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 11 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 12 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 13 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 14 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 15 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 16 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 17 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 18 |
| vulnerability |
VCID-p9v4-nweu-vydg |
|
| 19 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 20 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 21 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 22 |
| vulnerability |
VCID-rt5e-saz2-j7c9 |
|
| 23 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 24 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 25 |
| vulnerability |
VCID-swmn-7ns9-ekg1 |
|
| 26 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 27 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 28 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 29 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 30 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 31 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 32 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13 |
|
|
| aliases |
CVE-2014-3613
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uh5a-zcds-3bcc |
|
| 38 |
| url |
VCID-vfc1-yy11-bycp |
| vulnerability_id |
VCID-vfc1-yy11-bycp |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8619
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vfc1-yy11-bycp |
|
| 39 |
|
| 40 |
| url |
VCID-xyze-msxs-1qem |
| vulnerability_id |
VCID-xyze-msxs-1qem |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8617
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xyze-msxs-1qem |
|
| 41 |
|
| 42 |
| url |
VCID-zv25-wupq-bqfk |
| vulnerability_id |
VCID-zv25-wupq-bqfk |
| summary |
multiple issues |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| purl |
pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1y6d-7vfu-ybb3 |
|
| 1 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 2 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 3 |
| vulnerability |
VCID-51ac-1jc2-vfed |
|
| 4 |
| vulnerability |
VCID-5xjw-u8ad-n3g5 |
|
| 5 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 6 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 7 |
| vulnerability |
VCID-av4f-gxku-qbhp |
|
| 8 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 9 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 10 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 11 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 12 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 13 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 14 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 15 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 16 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 17 |
| vulnerability |
VCID-q8ja-keyk-fyfb |
|
| 18 |
| vulnerability |
VCID-qe9z-wuze-tucq |
|
| 19 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 20 |
| vulnerability |
VCID-sesh-938m-x3f8 |
|
| 21 |
| vulnerability |
VCID-snsg-c2up-b7cn |
|
| 22 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 23 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 24 |
| vulnerability |
VCID-vfc1-yy11-bycp |
|
| 25 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 26 |
| vulnerability |
VCID-xyze-msxs-1qem |
|
| 27 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
| 28 |
| vulnerability |
VCID-zv25-wupq-bqfk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11 |
|
| 1 |
| url |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| purl |
pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3ws4-1sak-r3ck |
|
| 1 |
| vulnerability |
VCID-4hha-2z31-2bf8 |
|
| 2 |
| vulnerability |
VCID-6745-tyba-33fa |
|
| 3 |
| vulnerability |
VCID-7jrx-ykk8-h3gp |
|
| 4 |
| vulnerability |
VCID-bb6v-z8yg-6fe3 |
|
| 5 |
| vulnerability |
VCID-dj48-3dkt-dbdh |
|
| 6 |
| vulnerability |
VCID-f8vu-23bb-5ue7 |
|
| 7 |
| vulnerability |
VCID-fhc8-r8gv-bugj |
|
| 8 |
| vulnerability |
VCID-fp66-fzqt-6yg7 |
|
| 9 |
| vulnerability |
VCID-h6xj-mys4-pucf |
|
| 10 |
| vulnerability |
VCID-kae8-wmf2-2kf1 |
|
| 11 |
| vulnerability |
VCID-kn6z-caj8-bbc9 |
|
| 12 |
| vulnerability |
VCID-p7mn-a632-c3ag |
|
| 13 |
| vulnerability |
VCID-qrnc-7ywu-37cz |
|
| 14 |
| vulnerability |
VCID-tcxd-z7f3-kkes |
|
| 15 |
| vulnerability |
VCID-ubnn-z97k-47gw |
|
| 16 |
| vulnerability |
VCID-xc5k-47n9-43d6 |
|
| 17 |
| vulnerability |
VCID-zg98-v6dj-s7gv |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10 |
|
|
| aliases |
CVE-2016-8621
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zv25-wupq-bqfk |
|