p PatchFirst

ALPINE-CVE-2016-7141

ALPINE-CVE-2016-7141

This page contains facts from public vulnerability sources. Check the original advisory before updating.

curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • curl Alpine:v3.10

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.11

    Affected ranges
    • ECOSYSTEM: < 7.50.2

    Update to 7.50.2

  • curl Alpine:v3.12

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.13

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.14

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.2

    Affected ranges
    • ECOSYSTEM: < 7.49.1-r2

    Update to 7.49.1-r2

  • curl Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.3

    Affected ranges
    • ECOSYSTEM: < 7.49.1-r2

    Update to 7.49.1-r2

  • curl Alpine:v3.4

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.5

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r0

    Update to 7.50.2-r0

  • curl Alpine:v3.6

    Affected ranges
    • ECOSYSTEM: < 7.50.2

    Update to 7.50.2

  • curl Alpine:v3.7

    Affected ranges
    • ECOSYSTEM: < 7.50.2

    Update to 7.50.2

  • curl Alpine:v3.8

    Affected ranges
    • ECOSYSTEM: < 7.50.2

    Update to 7.50.2

  • curl Alpine:v3.9

    Affected ranges
    • ECOSYSTEM: < 7.50.2-r1

    Update to 7.50.2-r1

Original sources

Check your server →