Information disclosure vulnerability in cURL

Описание

Multiple serious vulnerabilities have been found in cURL. Malicious users can exploit these vulnerabilities to obtain sensitive information.

Below is a complete list of vulnerabilities

1. An unknown vulnerability related to SMB can be exploited remotely via specially designed length and offset values;
2. Improper credentials handling can be exploited remotely via vectors related to curl_easy_reset connection.

Первичный источник обнаружения

• cURL advisory
  cURL advisory
  

Связанные продукты

• cURL

Список CVE

• CVE-2015-3236
  critical
• CVE-2015-3237
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com