The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
References
| Link | Resource |
|---|---|
| http://curl.haxx.se/docs/adv_20141105.html | Vendor Advisory |
| http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743 | |
| http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html | Mailing List Third Party Advisory |
| http://lists.opensuse.org/opensuse-updates/2015-02/msg00040.html | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2015-1254.html | |
| http://www.debian.org/security/2014/dsa-3069 | Third Party Advisory |
| http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html | |
| http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html | Vendor Advisory |
| http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html | Vendor Advisory |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html | |
| http://www.securityfocus.com/bid/70988 | |
| http://www.ubuntu.com/usn/USN-2399-1 | Third Party Advisory |
| https://support.apple.com/kb/HT205031 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
No history.
Information
Published : 2014-11-15 20:59
Updated : 2023-12-10 11:31
NVD link : CVE-2014-3707
Mitre link : CVE-2014-3707
CVE.ORG link : CVE-2014-3707
JSON object : View
Products Affected
oracle
- hyperion
opensuse
- opensuse
apple
- mac_os_x
debian
- debian_linux
canonical
- ubuntu_linux
haxx
- libcurl
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor