CVE-2014-0015

mediumpriority · track · 18EPSS 0.056 · 93 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
5.60% (93rd) EPSS
CVSS 4 · medium
Is it mine?
196 products
Check your exposure
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Fixedlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

    https://access.redhat.com/errata/RHSA-2014:0561
  • Workaroundcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundcurl-debuginfo-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.ppc as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.s390 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

  • Workaroundlibcurl-devel-0:7.19.7-37.el6_5.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Avoid using HTTP NTLM in your application. If you must use NTLM authentication, ensure that it is the only requested authentication method (use --ntlm specifically, do not use --anyauth or other authentication methods).

02

cvss

Technical severity, 0–10. One row per scoring source.

6.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.4–6.8

v2.04mediumAV:N/AC:H/Au:N/C:P/I:P/A:Nprimary · NVD / NIST USexploitability 4.9 · impact 4.9
v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Psecondary · FSTEC (BDU) RU
v2.03.4lowAV:N/AC:H/Au:N/C:P/I:P/A:N/E:Usecondary · CVSS-BT (t0sche)
v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nsecondary · Red Hat Product Security US
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USprimaryCWE-287US
04

affected products (196)

Products and version ranges known to be affected.

showing 20 of 196
05

advisories (3)

Vendor and ecosystem advisories describing this.

  • RHSA-2014:0561Red Hat Security Advisory: curl security and bug fix update2014-05-27csaf · redhat_csafUS

    Updated curl packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

  • WID-SEC-W-2023-1654cURL: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2014-01-30csaf · cert_bundDE

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in cURL ausnutzen, um Informationen offenzulegen.

  • CURL-CVE-2014-0015reuse of wrong HTTP NTLM connection2014-01-29vendor · osvUS

    libcurl can in some circumstances reuse the wrong connection when asked to do an NTLM-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that NTLM authenticates connections and not requests, contrary to how HTTP is designed to work and how other authentication methods work. An application that allows NTLM and another auth method (the bug only triggers if more than one auth method is asked for) to a server (that responds wanting NTLM) with user1:password1 and then does another operation to the same server with user2:password2 (when the previous connection was left alive) - the second request reuses the same connection and since it then sees that the NTLM negotiation is already made, it sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of auth methods to use is set with `CURLOPT_HTTPAUTH`. Two common auth defines in libcurl are `CURLAUTH_ANY` and `CURLAUTH_ANYSAFE`. Both of them ask for NTLM and other methods and can therefore trigger this problem. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).

06

also known as (9)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundnvdredhat_csafosvNVDCVE.orgMITRE
published 2014-02-02modified 2026-06-17
09

references (54)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan