Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-0036HistoryApr 13, 2012 - 8:55 p.m.
CVE-2012-0036
2012-04-1320:55:01
Debian Security Bug Tracker
security-tracker.debian.org
19
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
83.0%
curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 11 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 999 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 13 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
Related
openvas
openvas
Fedora Update for curl FEDORA-2012-0894
2012-04-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0143-1)
2021-06-09 00:00:00
Fedora Update for curl FEDORA-2012-0894
2012-04-02 00:00:00
ubuntucve
ubuntucve
CVE-2012-0036
2012-01-24 00:00:00
cve
cve
CVE-2012-0036
2012-04-13 20:55:01
nvd
nvd
CVE-2012-0036
2012-04-13 20:55:01
nessus
nessus
Ubuntu 10.10 / 11.04 / 11.10 : curl vulnerability (USN-1346-1)
2012-01-25 00:00:00
Fedora 15 : curl-7.21.3-13.fc15 (2012-0888)
2012-02-13 00:00:00
cURL/libcURL Remote Input Validation Vulnerability
2013-07-03 00:00:00
securityvulns
securityvulns
[USN-1346-1] curl vulnerability
2012-02-08 00:00:00
curl data injection
2012-02-08 00:00:00
Apple Mac OS X multiple security vulnerabilities
2012-08-20 00:00:00
ubuntu
ubuntu
curl vulnerability
2012-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: curl-7.21.7-6.fc16
2012-01-28 03:31:08
[SECURITY] Fedora 15 Update: curl-7.21.3-13.fc15
2012-02-11 22:04:59
cvelist
cvelist
CVE-2012-0036
2012-04-13 20:00:00
prion
prion
Crlf injection
2012-04-13 20:55:00
debian
debian
[SECURITY] [DSA 2398-1] curl security update
2012-01-30 19:49:07
osv
osv
curl - several
2012-03-31 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
83.0%
Related for DEBIANCVE:CVE-2012-0036