Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2016-3739
HistoryMay 20, 2016 - 2:59 p.m.

Code injection

2016-05-2014:59:00
PRIOn knowledge base
www.prio-n.com
5

7.1 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

JSON

The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.

CPENameOperatorVersion
curleq7.21.3
curleq7.24.0
curleq7.35.0
curleq7.21.5
curleq7.21.1
curleq7.32.0
curleq7.40.0
curleq7.29.0
curleq7.48.0
curleq7.22.0
Rows per page:
1-10 of 371

Related

ubuntucve 1
cvelist 1
kaspersky 1
veracode 1
cve 1
slackware 1
nvd 1
debiancve 1
redhatcve 1
openvas 3
nessus 5
hackerone 1
gentoo 1
rosalinux 1
oracle 2
ubuntucve
ubuntucve
CVE-2016-3739
2016-05-20 00:00:00
cvelist
cvelist
CVE-2016-3739
2016-05-20 00:00:00
kaspersky
kaspersky
KLA10815 Security bypass vulnerability in cURL
2016-05-18 00:00:00
veracode
veracode
MAN-IN-THE-MIDDLE
2019-06-10 05:22:36
cve
cve
CVE-2016-3739
2016-05-20 14:59:05
slackware
slackware
[slackware-security] curl
2016-05-20 22:56:34
nvd
nvd
CVE-2016-3739
2016-05-20 14:59:05
debiancve
debiancve
CVE-2016-3739
2016-05-20 14:59:05
redhatcve
redhatcve
CVE-2016-3739
2016-05-18 08:48:34
openvas
openvas
Slackware: Security Advisory (SSA:2016-141-01)
2022-04-21 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1626)
2020-06-16 00:00:00
HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03653)
2016-11-15 00:00:00
nessus
nessus
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : curl (SSA:2016-141-01)
2016-05-23 00:00:00
EulerOS 2.0 SP2 : curl (EulerOS-SA-2020-1626)
2020-06-17 00:00:00
GLSA-201701-47 : cURL: Multiple vulnerabilities
2017-01-20 00:00:00
hackerone
hackerone
curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS
2024-03-14 11:49:49
gentoo
gentoo
cURL: Multiple vulnerabilities
2017-01-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1818
2021-07-02 16:36:57
oracle
oracle
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00

7.1 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

JSON
Related for PRION:CVE-2016-3739
ubuntucve1cvelist1kaspersky1veracode1cve1slackware1nvd1debiancve1redhatcve1openvas3nessus5hackerone1gentoo1rosalinux1oracle2