p PatchFirst

ALPINE-CVE-2016-5419

ALPINE-CVE-2016-5419

This page contains facts from public vulnerability sources. Check the original advisory before updating.

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • curl Alpine:v3.10

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 7.50.1

    Update to 7.50.1

  • curl Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.13

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.14

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.2

    Affected ranges
    • ECOSYSTEM: < 7.49.1-r1

    Update to 7.49.1-r1

  • curl Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.3

    Affected ranges
    • ECOSYSTEM: < 7.49.1-r1

    Update to 7.49.1-r1

  • curl Alpine:v3.4

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.5

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

  • curl Alpine:v3.6

    Affected ranges
    • ECOSYSTEM: < 7.50.1

    Update to 7.50.1

  • curl Alpine:v3.7

    Affected ranges
    • ECOSYSTEM: < 7.50.1

    Update to 7.50.1

  • curl Alpine:v3.8

    Affected ranges
    • ECOSYSTEM: < 7.50.1

    Update to 7.50.1

  • curl Alpine:v3.9

    Affected ranges
    • ECOSYSTEM: < 7.50.1-r0

    Update to 7.50.1-r0

Original sources

Check your server →