The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Aug 30, 2017 | Oct 3, 2016 |
| Amazon_linux | — | Upgrade curl | Jul 1, 2017 | Sep 27, 2016 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Dec 16, 2016 | Oct 3, 2016 |
| Debian | — | Upgrade curl | Mar 31, 2017 | Sep 9, 2016 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Oct 30, 2017 | Oct 3, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libcurlUpgrade libcurl-develUpgrade curl | Nov 30, 2017 | Oct 3, 2016 |
| Oracle_linux | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 9, 2016 | Sep 5, 2016 |
| Redhat_linux | — | No solution existsUpgrade curl-debuginfoUpgrade curlUpgrade libcurlUpgrade libcurl-devel | Nov 4, 2016 | Oct 3, 2016 |
| Suse | — | Upgrade libcurl4-32bitUpgrade curlUpgrade libcurl4-openssl1-x86Upgrade sles12-docker-imageUpgrade libcurl4-openssl1Upgrade curl-openssl1Upgrade libcurl4-x86Upgrade libcurl4Upgrade libcurl4-openssl1-32bitUpgrade sles12sp1-docker-imageUpgrade libcurl-devel | Oct 12, 2016 | Oct 3, 2016 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl3Upgrade libcurl3-gnutls | Nov 3, 2016 | Oct 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub