CVE-2014-3707
Fixed in a distro release EPSS 5%
The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
Products: canonical ubuntu_linux, apple mac_os_x, opensuse, oracle hyperion, debian_linux, haxx libcurl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | curl | 7.38.0-3 |
| Debian 13 | curl | 7.38.0-3 |
| Debian 14 | curl | 7.38.0-3 |
| Debian 6.0 | curl | 7.21.0-2.1+squeeze10 |
| Debian 7 | curl | 7.26.0-1+wheezy11 |
| Red Hat Enterprise Linux 6 | curl | 0:7.19.7-46.el6 |
| Red Hat Enterprise Linux 6 | curl-debuginfo | 0:7.19.7-46.el6 |
| Red Hat Enterprise Linux 6 | libcurl | 0:7.19.7-46.el6 |
| Red Hat Enterprise Linux 6 | libcurl-devel | 0:7.19.7-46.el6 |
| Red Hat Enterprise Linux 7 | curl | 0:7.29.0-25.el7 |
| Red Hat Enterprise Linux 7 | curl-debuginfo | 0:7.29.0-25.el7 |
| Red Hat Enterprise Linux 7 | libcurl | 0:7.29.0-25.el7 |
| Red Hat Enterprise Linux 7 | libcurl-devel | 0:7.29.0-25.el7 |
| Ubuntu 14.04 LTS | curl | 7.35.0-1ubuntu2.2 |