CVE-2014-3707 The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-...
MediumCVSS 4.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/curl(Debian:12) | < 7.38.0-3 | 7.38.0-3 |
| debian/curl(Debian:13) | < 7.38.0-3 | 7.38.0-3 |
| debian/curl(Debian:14) | < 7.38.0-3 | 7.38.0-3 |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| apple mac os x | = 10.10.0 | No fix listed |
| apple mac os x | = 10.10.1 | No fix listed |
| apple mac os x | = 10.10.2 | No fix listed |
| apple mac os x | = 10.10.3 | No fix listed |
| apple mac os x | = 10.10.4 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| oracle hyperion | = 11.1.2.2 | No fix listed |
| oracle hyperion | = 11.1.2.3 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| haxx libcurl | = 7.17.1 | No fix listed |
| haxx libcurl | = 7.18.0 | No fix listed |
| haxx libcurl | = 7.18.1 | No fix listed |
| haxx libcurl | = 7.18.2 | No fix listed |
| haxx libcurl | = 7.19.0 | No fix listed |
| haxx libcurl | = 7.19.1 | No fix listed |
| haxx libcurl | = 7.19.2 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx libcurl | = 7.19.3 | No fix listed |
| haxx libcurl | = 7.19.4 | No fix listed |
| haxx libcurl | = 7.19.5 | No fix listed |
| haxx libcurl | = 7.19.6 | No fix listed |
| haxx libcurl | = 7.19.7 | No fix listed |
| haxx libcurl | = 7.20.0 | No fix listed |
| haxx libcurl | = 7.20.1 | No fix listed |
| haxx libcurl | = 7.21.0 | No fix listed |
| haxx libcurl | = 7.21.1 | No fix listed |
| haxx libcurl | = 7.21.2 | No fix listed |
| haxx libcurl | = 7.21.3 | No fix listed |
| haxx libcurl | = 7.21.4 | No fix listed |
| haxx libcurl | = 7.21.5 | No fix listed |
| haxx libcurl | = 7.21.6 | No fix listed |
| haxx libcurl | = 7.21.7 | No fix listed |
| haxx libcurl | = 7.22.0 | No fix listed |
| haxx libcurl | = 7.23.0 | No fix listed |
| haxx libcurl | = 7.23.1 | No fix listed |
| haxx libcurl | = 7.24.0 | No fix listed |
| haxx libcurl | = 7.25.0 | No fix listed |
| haxx libcurl | = 7.26.0 | No fix listed |
| haxx libcurl | = 7.27.0 | No fix listed |
| haxx libcurl | = 7.28.0 | No fix listed |
| haxx libcurl | = 7.28.1 | No fix listed |
| haxx libcurl | = 7.29.0 | No fix listed |
| haxx libcurl | = 7.30.0 | No fix listed |
| haxx libcurl | = 7.31.0 | No fix listed |
| haxx libcurl | = 7.32.0 | No fix listed |
| haxx libcurl | = 7.33.0 | No fix listed |
| haxx libcurl | = 7.34.0 | No fix listed |
| haxx libcurl | = 7.35.0 | No fix listed |
| haxx libcurl | = 7.36.0 | No fix listed |
| haxx libcurl | = 7.37.0 | No fix listed |
| haxx libcurl | = 7.37.1 | No fix listed |
| haxx libcurl | = 7.38.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-3707 vendor-advisory
- curl.haxx.se vendor-advisory
- kb.juniper.net
- APPLE-SA-2015-08-13-2 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:0248 third-party-advisory vendor-advisory
- RHSA-2015:1254 vendor-advisory
- DSA-3069 third-party-advisory vendor-advisory
- www.oracle.com
- www.oracle.com vendor-advisory
- www.oracle.com vendor-advisory
- www.oracle.com
- 70988 vdb-entry
- USN-2399-1 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory