CVE-2014-0015

Published: Feb 2, 2014Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.

Affected (128)

Products: Haxx: Libcurl, Curl

Haxx

2 products

Libcurl

Curl

Configuration A

64 vulnerable

Vulnerable Software	Affected Versions
Haxx Libcurl	Version 7.10.6
Haxx Libcurl	Version 7.10.7
Haxx Libcurl	Version 7.10.8
Haxx Libcurl	Version 7.11.0
Haxx Libcurl	Version 7.11.1
Haxx Libcurl	Version 7.11.2
Haxx Libcurl	Version 7.12.0
Haxx Libcurl	Version 7.12.1
Haxx Libcurl	Version 7.12.2
Haxx Libcurl	Version 7.12.3
Haxx Libcurl	Version 7.13.0
Haxx Libcurl	Version 7.13.1
Haxx Libcurl	Version 7.13.2
Haxx Libcurl	Version 7.14.0
Haxx Libcurl	Version 7.14.1
Haxx Libcurl	Version 7.15.0
Haxx Libcurl	Version 7.15.1
Haxx Libcurl	Version 7.15.2
Haxx Libcurl	Version 7.15.3
Haxx Libcurl	Version 7.15.4
Haxx Libcurl	Version 7.15.5
Haxx Libcurl	Version 7.16.0
Haxx Libcurl	Version 7.16.1
Haxx Libcurl	Version 7.16.2
Haxx Libcurl	Version 7.16.3
Haxx Libcurl	Version 7.16.4
Haxx Libcurl	Version 7.17.0
Haxx Libcurl	Version 7.17.1
Haxx Libcurl	Version 7.18.0
Haxx Libcurl	Version 7.18.1
Haxx Libcurl	Version 7.18.2
Haxx Libcurl	Version 7.19.0
Haxx Libcurl	Version 7.19.1
Haxx Libcurl	Version 7.19.2
Haxx Libcurl	Version 7.19.3
Haxx Libcurl	Version 7.19.4
Haxx Libcurl	Version 7.19.5
Haxx Libcurl	Version 7.19.6
Haxx Libcurl	Version 7.19.7
Haxx Libcurl	Version 7.20.0
Haxx Libcurl	Version 7.20.1
Haxx Libcurl	Version 7.21.0
Haxx Libcurl	Version 7.21.1
Haxx Libcurl	Version 7.21.2
Haxx Libcurl	Version 7.21.3
Haxx Libcurl	Version 7.21.4
Haxx Libcurl	Version 7.21.5
Haxx Libcurl	Version 7.21.6
Haxx Libcurl	Version 7.21.7
Haxx Libcurl	Version 7.22.0
Haxx Libcurl	Version 7.23.0
Haxx Libcurl	Version 7.23.1
Haxx Libcurl	Version 7.24.0
Haxx Libcurl	Version 7.25.0
Haxx Libcurl	Version 7.26.0
Haxx Libcurl	Version 7.27.0
Haxx Libcurl	Version 7.28.0
Haxx Libcurl	Version 7.28.1
Haxx Libcurl	Version 7.29.0
Haxx Libcurl	Version 7.30.0
Haxx Libcurl	Version 7.31.0
Haxx Libcurl	Version 7.32.0
Haxx Libcurl	Version 7.33.0
Haxx Libcurl	Version 7.34.0

Configuration B

64 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	Version 7.10.6
Haxx Curl	Version 7.10.7
Haxx Curl	Version 7.10.8
Haxx Curl	Version 7.11.0
Haxx Curl	Version 7.11.1
Haxx Curl	Version 7.11.2
Haxx Curl	Version 7.12.0
Haxx Curl	Version 7.12.1
Haxx Curl	Version 7.12.2
Haxx Curl	Version 7.12.3
Haxx Curl	Version 7.13.0
Haxx Curl	Version 7.13.1
Haxx Curl	Version 7.13.2
Haxx Curl	Version 7.14.0
Haxx Curl	Version 7.14.1
Haxx Curl	Version 7.15.0
Haxx Curl	Version 7.15.1
Haxx Curl	Version 7.15.2
Haxx Curl	Version 7.15.3
Haxx Curl	Version 7.15.4
Haxx Curl	Version 7.15.5
Haxx Curl	Version 7.16.0
Haxx Curl	Version 7.16.1
Haxx Curl	Version 7.16.2
Haxx Curl	Version 7.16.3
Haxx Curl	Version 7.16.4
Haxx Curl	Version 7.17.0
Haxx Curl	Version 7.17.1
Haxx Curl	Version 7.18.0
Haxx Curl	Version 7.18.1
Haxx Curl	Version 7.18.2
Haxx Curl	Version 7.19.0
Haxx Curl	Version 7.19.1
Haxx Curl	Version 7.19.2
Haxx Curl	Version 7.19.3
Haxx Curl	Version 7.19.4
Haxx Curl	Version 7.19.5
Haxx Curl	Version 7.19.6
Haxx Curl	Version 7.19.7
Haxx Curl	Version 7.20.0
Haxx Curl	Version 7.20.1
Haxx Curl	Version 7.21.0
Haxx Curl	Version 7.21.1
Haxx Curl	Version 7.21.2
Haxx Curl	Version 7.21.3
Haxx Curl	Version 7.21.4
Haxx Curl	Version 7.21.5
Haxx Curl	Version 7.21.6
Haxx Curl	Version 7.21.7
Haxx Curl	Version 7.22.0
Haxx Curl	Version 7.23.0
Haxx Curl	Version 7.23.1
Haxx Curl	Version 7.24.0
Haxx Curl	Version 7.25.0
Haxx Curl	Version 7.26.0
Haxx Curl	Version 7.27.0
Haxx Curl	Version 7.28.0
Haxx Curl	Version 7.28.1
Haxx Curl	Version 7.29.0
Haxx Curl	Version 7.30.0
Haxx Curl	Version 7.31.0
Haxx Curl	Version 7.32.0
Haxx Curl	Version 7.33.0
Haxx Curl	Version 7.34.0