CVE-2015-3237
22.06.2015, 19:59
The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| haxx | curl | 7.40.0 |
| haxx | curl | 7.41.0 |
| haxx | curl | 7.42.0 |
| haxx | curl | 7.42.1 |
| haxx | libcurl | 7.40.0 |
| haxx | libcurl | 7.41.0 |
| haxx | libcurl | 7.42.0 |
| haxx | libcurl | 7.42.1 |
| hp | system_management_homepage | 𝑥 ≤ 7.5.3.1 |
| oracle | enterprise_manager_ops_center | 12.1.4 |
| oracle | enterprise_manager_ops_center | 12.2.2 |
| oracle | enterprise_manager_ops_center | 12.3.2 |
| oracle | glassfish_server | 3.0.1 |
| oracle | glassfish_server | 3.1.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| curl |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl4 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl4-32bit |
|
Common Weakness Enumeration
References