6.4

CVE-2014-0138

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.

Data is provided by the National Vulnerability Database (NVD)
Haxx ≫ Curl Version7.10.6
Haxx ≫ Curl Version7.10.7
Haxx ≫ Curl Version7.10.8
Haxx ≫ Curl Version7.11.0
Haxx ≫ Curl Version7.11.1
Haxx ≫ Curl Version7.11.2
Haxx ≫ Curl Version7.12.0
Haxx ≫ Curl Version7.12.1
Haxx ≫ Curl Version7.12.2
Haxx ≫ Curl Version7.12.3
Haxx ≫ Curl Version7.13.0
Haxx ≫ Curl Version7.13.1
Haxx ≫ Curl Version7.13.2
Haxx ≫ Curl Version7.14.0
Haxx ≫ Curl Version7.14.1
Haxx ≫ Curl Version7.15.0
Haxx ≫ Curl Version7.15.1
Haxx ≫ Curl Version7.15.2
Haxx ≫ Curl Version7.15.3
Haxx ≫ Curl Version7.15.4
Haxx ≫ Curl Version7.15.5
Haxx ≫ Curl Version7.16.0
Haxx ≫ Curl Version7.16.1
Haxx ≫ Curl Version7.16.2
Haxx ≫ Curl Version7.16.3
Haxx ≫ Curl Version7.16.4
Haxx ≫ Curl Version7.17.0
Haxx ≫ Curl Version7.17.1
Haxx ≫ Curl Version7.18.0
Haxx ≫ Curl Version7.18.1
Haxx ≫ Curl Version7.18.2
Haxx ≫ Curl Version7.19.0
Haxx ≫ Curl Version7.19.1
Haxx ≫ Curl Version7.19.2
Haxx ≫ Curl Version7.19.3
Haxx ≫ Curl Version7.19.4
Haxx ≫ Curl Version7.19.5
Haxx ≫ Curl Version7.19.6
Haxx ≫ Curl Version7.19.7
Haxx ≫ Curl Version7.20.0
Haxx ≫ Curl Version7.20.1
Haxx ≫ Curl Version7.21.0
Haxx ≫ Curl Version7.21.1
Haxx ≫ Curl Version7.21.2
Haxx ≫ Curl Version7.21.3
Haxx ≫ Curl Version7.21.4
Haxx ≫ Curl Version7.21.5
Haxx ≫ Curl Version7.21.6
Haxx ≫ Curl Version7.21.7
Haxx ≫ Curl Version7.22.0
Haxx ≫ Curl Version7.23.0
Haxx ≫ Curl Version7.23.1
Haxx ≫ Curl Version7.24.0
Haxx ≫ Curl Version7.25.0
Haxx ≫ Curl Version7.26.0
Haxx ≫ Curl Version7.27.0
Haxx ≫ Curl Version7.28.0
Haxx ≫ Curl Version7.28.1
Haxx ≫ Curl Version7.29.0
Haxx ≫ Curl Version7.30.0
Haxx ≫ Curl Version7.31.0
Haxx ≫ Curl Version7.32.0
Haxx ≫ Curl Version7.33.0
Haxx ≫ Curl Version7.34.0
Haxx ≫ Curl Version7.35.0
Haxx ≫ Libcurl Version7.10.6
Haxx ≫ Libcurl Version7.10.7
Haxx ≫ Libcurl Version7.10.8
Haxx ≫ Libcurl Version7.11.0
Haxx ≫ Libcurl Version7.11.1
Haxx ≫ Libcurl Version7.11.2
Haxx ≫ Libcurl Version7.12.0
Haxx ≫ Libcurl Version7.12.1
Haxx ≫ Libcurl Version7.12.2
Haxx ≫ Libcurl Version7.12.3
Haxx ≫ Libcurl Version7.13.0
Haxx ≫ Libcurl Version7.13.1
Haxx ≫ Libcurl Version7.13.2
Haxx ≫ Libcurl Version7.14.0
Haxx ≫ Libcurl Version7.14.1
Haxx ≫ Libcurl Version7.15.0
Haxx ≫ Libcurl Version7.15.1
Haxx ≫ Libcurl Version7.15.2
Haxx ≫ Libcurl Version7.15.3
Haxx ≫ Libcurl Version7.15.4
Haxx ≫ Libcurl Version7.15.5
Haxx ≫ Libcurl Version7.16.0
Haxx ≫ Libcurl Version7.16.1
Haxx ≫ Libcurl Version7.16.2
Haxx ≫ Libcurl Version7.16.3
Haxx ≫ Libcurl Version7.16.4
Haxx ≫ Libcurl Version7.17.0
Haxx ≫ Libcurl Version7.17.1
Haxx ≫ Libcurl Version7.18.0
Haxx ≫ Libcurl Version7.18.1
Haxx ≫ Libcurl Version7.18.2
Haxx ≫ Libcurl Version7.19.0
Haxx ≫ Libcurl Version7.19.1
Haxx ≫ Libcurl Version7.19.2
Haxx ≫ Libcurl Version7.19.3
Haxx ≫ Libcurl Version7.19.4
Haxx ≫ Libcurl Version7.19.5
Haxx ≫ Libcurl Version7.19.6
Haxx ≫ Libcurl Version7.19.7
Haxx ≫ Libcurl Version7.20.0
Haxx ≫ Libcurl Version7.20.1
Haxx ≫ Libcurl Version7.21.0
Haxx ≫ Libcurl Version7.21.1
Haxx ≫ Libcurl Version7.21.2
Haxx ≫ Libcurl Version7.21.3
Haxx ≫ Libcurl Version7.21.4
Haxx ≫ Libcurl Version7.21.5
Haxx ≫ Libcurl Version7.21.6
Haxx ≫ Libcurl Version7.21.7
Haxx ≫ Libcurl Version7.22.0
Haxx ≫ Libcurl Version7.23.0
Haxx ≫ Libcurl Version7.23.1
Haxx ≫ Libcurl Version7.24.0
Haxx ≫ Libcurl Version7.25.0
Haxx ≫ Libcurl Version7.26.0
Haxx ≫ Libcurl Version7.27.0
Haxx ≫ Libcurl Version7.28.0
Haxx ≫ Libcurl Version7.28.1
Haxx ≫ Libcurl Version7.29.0
Haxx ≫ Libcurl Version7.30.0
Haxx ≫ Libcurl Version7.31.0
Haxx ≫ Libcurl Version7.32.0
Haxx ≫ Libcurl Version7.33.0
Haxx ≫ Libcurl Version7.34.0
Haxx ≫ Libcurl Version7.35.0
Debian ≫ Debian Linux Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.27% 0.788
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.