CVE-2015-3236
EUVD-2015-329222.06.2015, 19:59
cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| haxx | curl | 7.40.0 |
| haxx | curl | 7.41.0 |
| haxx | curl | 7.42.0 |
| haxx | curl | 7.42.1 |
| haxx | libcurl | 7.40.0 |
| haxx | libcurl | 7.41.0 |
| haxx | libcurl | 7.42.0 |
| haxx | libcurl | 7.42.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References