cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Nov 18, 2014 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Mar 29, 2016 | Nov 18, 2014 |
| Debian | — | Upgrade curl | Jul 30, 2024 | Nov 18, 2014 |
| Suse | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl4Upgrade libcurl4-32bit | Dec 18, 2015 | Sep 17, 2014 |
| Ubuntu | — | Upgrade libcurl3Upgrade libcurl3-gnutlsUpgrade libcurl3-nss | Nov 8, 2024 | Nov 18, 2014 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub