CVE-2015-3153: apple mac_os_x
CVSS: 5.0v2.0MediumModified
AliasesUBUNTU-CVE-2015-3153DEBIAN-CVE-2015-3153DSA-3240-1
Published 01-05-2015Last modified 06-08-2024
Vulnerability summary
CVE-2015-3153 is a medium (CVSS 5.0) vulnerability in apple mac_os_x. EPSS estimates a 7.34% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
7.34%
0%100%
Low · +0.09 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 3 · Related 3Timeline
- 01-05-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
7.34%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
+0.09 pp
From 7.25% on 18-09-2026
18-09-202618-10-2026
EPSS score7.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- curl< 7.42.1-1 | < 7.38.0-4+deb8u2
- debian_linuxEOL8.0
Apple1 product
- mac_os_x10.10.4
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 14.10 | 15.1
Oracle1 product
- enterprise_manager_ops_center≤ 12.1.3 | 12.2.0 | 12.2.1 | 12.3.0
Ubuntu1 product
- curlAll versions (No fix recorded)
6 vendors · 8 products
References
18 links- kc.mcafee.com/corporate/index?page=content&id=SB10131X Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlX Refsource CONFIRMPatchThird Party Advisory
- www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlX Refsource CONFIRMPatchThird Party Advisory
- lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlX Refsource CONFIRM
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10743X Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlX Refsource CONFIRM
