NVD

Id
25065  
Name
CVE-2015-3145  
Description
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-24  
Modified Date
2017-01-02  
Seq
2015-3145  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132274 25065 CVE-2015-3145 http://advisories.mageia.org/MGASA-2015-0179.html  View
132275 25065 CVE-2015-3145 http://curl.haxx.se/docs/adv_20150422C.html  View
132276 25065 CVE-2015-3145 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743  View
132277 25065 CVE-2015-3145 APPLE-SA-2015-08-13-2  View
132278 25065 CVE-2015-3145 FEDORA-2015-6695  View
132279 25065 CVE-2015-3145 FEDORA-2015-6712  View
132280 25065 CVE-2015-3145 FEDORA-2015-6864  View
132281 25065 CVE-2015-3145 FEDORA-2015-6728  View
132282 25065 CVE-2015-3145 FEDORA-2015-6853  View
132283 25065 CVE-2015-3145 openSUSE-SU-2015:0799  View
132284 25065 CVE-2015-3145 DSA-3232  View
132285 25065 CVE-2015-3145 MDVSA-2015:219  View
132286 25065 CVE-2015-3145 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
132287 25065 CVE-2015-3145 74303  View
132288 25065 CVE-2015-3145 1032232  View
132289 25065 CVE-2015-3145 USN-2591-1  View
132290 25065 CVE-2015-3145 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763  View
132291 25065 CVE-2015-3145 GLSA-201509-02  View
132292 25065 CVE-2015-3145 https://support.apple.com/kb/HT205031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7166 JVNDB-2015-002486 cURL および libcurl の sanitize_cookie_path 関数におけるサービス運用妨害 (DoS) の脆弱性 cURL および libcurl の sanitize_cookie_path 関数は、インデックスを適切に計算しないため、サービス運用妨害 (out-of-bounds write およびクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-3145 80370 CVE-2015-3145 25065 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002486.html 2015-04-22 2016-09-08 View