CVE-2015-3144 The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and cr...
HighCVSS 9.0
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/curl(Debian:12) | < 7.42.0-1 | 7.42.0-1 |
| debian/curl(Debian:13) | < 7.42.0-1 | 7.42.0-1 |
| debian/curl(Debian:14) | < 7.42.0-1 | 7.42.0-1 |
| oracle mysql enterprise monitor | <= 2.3.20 | No fix listed |
| oracle mysql enterprise monitor | <= 3.0.22 | No fix listed |
| haxx curl | = 7.37.0 | No fix listed |
| haxx curl | = 7.37.1 | No fix listed |
| haxx curl | = 7.38.0 | No fix listed |
| haxx curl | = 7.39.0 | No fix listed |
| haxx curl | = 7.40.0 | No fix listed |
| haxx curl | = 7.41.0 | No fix listed |
| haxx libcurl | = 7.37.0 | No fix listed |
| haxx libcurl | = 7.37.1 | No fix listed |
| haxx libcurl | = 7.38.0 | No fix listed |
| haxx libcurl | = 7.39 | No fix listed |
| haxx libcurl | = 7.40.0 | No fix listed |
| haxx libcurl | = 7.41.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-3144 vendor-advisory
- curl.haxx.se vendor-advisory
- kb.juniper.net
- APPLE-SA-2015-08-13-2 vendor-advisory
- FEDORA-2015-6695 vendor-advisory
- FEDORA-2015-6864 vendor-advisory
- FEDORA-2015-6728 vendor-advisory
- FEDORA-2015-6853 vendor-advisory
- openSUSE-SU-2015:0799 vendor-advisory
- DSA-3232 vendor-advisory
- www.oracle.com
- www.oracle.com
- www.oracle.com
- 74300 vdb-entry
- 1032232 vdb-entry
- USN-2591-1 vendor-advisory
- GLSA-201509-02 vendor-advisory
- support.apple.com