SUSE-SU-2015:0990-1: curl&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:0990-1 is a vulnerability in curl&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 29-04-2015PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for curl curl was updated to fix five security issues. The following vulnerabilities were fixed: * CVE-2015-3143: curl could re-use NTML authenticateds connections * CVE-2015-3144: curl could access memory out of bounds with zero length host names * CVE-2015-3145: curl cookie parser could access memory out of boundary * CVE-2015-3148: curl could treat Negotiate as not connection-oriented * CVE-2015-3153: curl could have sent sensitive HTTP headers also to proxies
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- curl&distro=SUSE Linux Enterprise Desktop 12< 7.37.0-15.1
- curl&distro=SUSE Linux Enterprise Server 12< 7.37.0-15.1
- curl&distro=SUSE Linux Enterprise Server for SAP Applications 12< 7.37.0-15.1
- curl&distro=SUSE Linux Enterprise Software Development Kit 12< 7.37.0-15.1
1 vendor · 4 products
References
11 links- bugzilla.suse.com/927556REPORT
- bugzilla.suse.com/927607REPORT
- bugzilla.suse.com/927608REPORT
- bugzilla.suse.com/927746REPORT
- bugzilla.suse.com/928533REPORT