CVE-2015-3145
Beschrijving
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
Vendors
Affected products
References
- advisories.mageia.org
- curl.haxx.se
- kb.juniper.net
- lists.apple.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.opensuse.org
- www.debian.org
- www.mandriva.com
- www.oracle.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- www.ubuntu.com
- h20566.www2.hpe.com
- security.gentoo.org
- support.apple.com