CVE-2015-3144

Published Apr 24, 2015

Last updated 3 months ago

CVSS info 9.0

Overview

Description: The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
Source: secalert@redhat.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9
Impact score: 10
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Hype score: Not currently trending

Evaluator

Comment: The previous CVSS assessment 7.5 (AV:N/AC:L/AU:N/C:P/I:P/A:P) was provided at the time of initial analysis based on the best available published information at that time. The score has been updated to reflect the impact to Oracle products per <a href=http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html> Oracle Critical Patch Update Advisory - October 2015 </a>. Other products listed as vulnerable may or may not be similarly impacted. Also Per <a href=http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html> Oracle Critical Patch Update Advisory - October 2015 </a> - This fix also addresses CVE-2014-3707, CVE-2014-8150, CVE-2015-3153 and CVE-2015-3236. The CVSS score is 9.0 if MySQL Enterprise Monitor runs with admin or root privileges. The score would be 6.5 if MySQL Enterprise Monitor runs with non-admin privileges and the impact on Confidentiality, Integrity and Availability would be Partial+. The Sub-Component for version 3.0.x is 'Proxy/Aggregator'.
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F8B75B8-1CCD-47BC-B6AB-0317FAD81437",
            "versionEndIncluding": "2.3.20"
          },
          {
            "criteria": "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E746A528-22B2-4FB3-BF7C-78884705E780",
            "versionEndIncluding": "3.0.22"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.37.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6FC1313E-8DCB-4B29-A9BC-A27C8CB360E9"
          },
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.37.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B27C2E02-5C0A-4A12-B0A6-5B1C0DFA94E9"
          },
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.38.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EFC7535F-B8C7-490F-A2F9-1DCFD41A3C9B"
          },
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.39.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3CCBFE6D-F6A9-4394-9AF8-F830DC7E6A81"
          },
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.40.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5DEBBFCA-6A18-4F8F-B841-50255C952FA0"
          },
          {
            "criteria": "cpe:2.3:a:haxx:curl:7.41.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FEEAE437-A645-468B-B283-44799658F534"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.37.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6FAC1B55-F492-484E-B837-E7745682DE0A"
          },
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.37.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0D57914-B40A-462B-9C78-6433BE2B2DB4"
          },
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.38.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A9A12DF7-62C5-46AD-9236-E2821C64156E"
          },
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.39:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C43697D-390A-4AC0-A5D8-62B6D22245BF"
          },
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.40.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D52E9E9F-7A35-4CB9-813E-5A1D4A36415C"
          },
          {
            "criteria": "cpe:2.3:a:haxx:libcurl:7.41.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "257291FB-969C-4413-BA81-806B5E1B40A7"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49A63F39-30BE-443F-AF10-6245587D3359"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B"
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Evaluator

Configurations

References