CVE-2016-5421
Fixed in a distro release EPSS 8%
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.
Products: opensuse leap, haxx libcurl, canonical ubuntu_linux, debian_linux, fedoraproject fedora, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | curl | 7.50.1-r0 |
| Alpine 3.11 | curl | 7.50.1 |
| Alpine 3.12 | curl | 7.50.1-r0 |
| Alpine 3.13 | curl | 7.50.1-r0 |
| Alpine 3.14 | curl | 7.50.1-r0 |
| Alpine 3.15 | curl | 7.50.1-r0 |
| Alpine 3.16 | curl | 7.50.1-r0 |
| Alpine 3.17 | curl | 7.50.1-r0 |
| Alpine 3.18 | curl | 7.50.1-r0 |
| Alpine 3.19 | curl | 7.50.1-r0 |
| Alpine 3.2 | curl | 7.49.1-r1 |
| Alpine 3.20 | curl | 7.50.1-r0 |
| Alpine 3.21 | curl | 7.50.1-r0 |
| Alpine 3.22 | curl | 7.50.1-r0 |
| Alpine 3.23 | curl | 7.50.1-r0 |
| Alpine 3.24 | curl | 7.50.1-r0 |
| Alpine 3.3 | curl | 7.49.1-r1 |
| Alpine 3.4 | curl | 7.50.1-r0 |
| Alpine 3.5 | curl | 7.50.1-r0 |
| Alpine 3.6 | curl | 7.50.1 |
| Alpine 3.7 | curl | 7.50.1 |
| Alpine 3.8 | curl | 7.50.1 |
| Alpine 3.9 | curl | 7.50.1-r0 |
| Debian 12 | curl | 7.50.1-1 |
| Debian 13 | curl | 7.50.1-1 |
| Debian 14 | curl | 7.50.1-1 |
| Debian 8 | curl | 7.38.0-4+deb8u4 |
| Red Hat rhel software collections 3 | httpd24-curl | 0:7.61.1-1.el6 |
| Red Hat rhel software collections 3 | httpd24-curl | 0:7.61.1-1.el7 |
| Red Hat rhel software collections 3 | httpd24-curl-debuginfo | 0:7.61.1-1.el6 |
| Red Hat rhel software collections 3 | httpd24-curl-debuginfo | 0:7.61.1-1.el7 |
| Red Hat rhel software collections 3 | httpd24-httpd | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-httpd | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-httpd-debuginfo | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-httpd-debuginfo | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-httpd-devel | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-httpd-devel | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-httpd-manual | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-httpd-manual | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-httpd-tools | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-httpd-tools | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-libcurl | 0:7.61.1-1.el6 |
| Red Hat rhel software collections 3 | httpd24-libcurl | 0:7.61.1-1.el7 |
| Red Hat rhel software collections 3 | httpd24-libcurl-devel | 0:7.61.1-1.el6 |
| Red Hat rhel software collections 3 | httpd24-libcurl-devel | 0:7.61.1-1.el7 |
| Red Hat rhel software collections 3 | httpd24-libnghttp2 | 0:1.7.1-7.el6 |
| Red Hat rhel software collections 3 | httpd24-libnghttp2 | 0:1.7.1-7.el7 |
| Red Hat rhel software collections 3 | httpd24-libnghttp2-devel | 0:1.7.1-7.el6 |
| Red Hat rhel software collections 3 | httpd24-libnghttp2-devel | 0:1.7.1-7.el7 |
| Red Hat rhel software collections 3 | httpd24-mod_ldap | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-mod_ldap | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-mod_md | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-mod_proxy_html | 1:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-mod_proxy_html | 1:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-mod_session | 0:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-mod_session | 0:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-mod_ssl | 1:2.4.34-7.el6 |
| Red Hat rhel software collections 3 | httpd24-mod_ssl | 1:2.4.34-7.el7 |
| Red Hat rhel software collections 3 | httpd24-nghttp2 | 0:1.7.1-7.el6 |
| Red Hat rhel software collections 3 | httpd24-nghttp2 | 0:1.7.1-7.el7 |
| Red Hat rhel software collections 3 | httpd24-nghttp2-debuginfo | 0:1.7.1-7.el6 |
| Red Hat rhel software collections 3 | httpd24-nghttp2-debuginfo | 0:1.7.1-7.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | curl | 7.37.0-28.1 |
| SUSE Linux Enterprise Server 12 SP1 | curl | 7.37.0-28.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | curl | 7.37.0-28.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | curl | 7.37.0-28.1 |
| Ubuntu 14.04 LTS | curl | 7.35.0-1ubuntu2.8 |
| Ubuntu 16.04 LTS | curl | 7.47.0-1ubuntu2.1 |