CVE-2014-0138

Published: Apr 15, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.

Affected (131)

Products: Haxx: Curl, Libcurl · Debian: Debian Linux

2 products

1 product

Configuration A

130 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	Version 7.10.6
Haxx Curl	Version 7.10.7
Haxx Curl	Version 7.10.8
Haxx Curl	Version 7.11.0
Haxx Curl	Version 7.11.1
Haxx Curl	Version 7.11.2
Haxx Curl	Version 7.12.0
Haxx Curl	Version 7.12.1
Haxx Curl	Version 7.12.2
Haxx Curl	Version 7.12.3
Haxx Curl	Version 7.13.0
Haxx Curl	Version 7.13.1
Haxx Curl	Version 7.13.2
Haxx Curl	Version 7.14.0
Haxx Curl	Version 7.14.1
Haxx Curl	Version 7.15.0
Haxx Curl	Version 7.15.1
Haxx Curl	Version 7.15.2
Haxx Curl	Version 7.15.3
Haxx Curl	Version 7.15.4
Haxx Curl	Version 7.15.5
Haxx Curl	Version 7.16.0
Haxx Curl	Version 7.16.1
Haxx Curl	Version 7.16.2
Haxx Curl	Version 7.16.3
Haxx Curl	Version 7.16.4
Haxx Curl	Version 7.17.0
Haxx Curl	Version 7.17.1
Haxx Curl	Version 7.18.0
Haxx Curl	Version 7.18.1
Haxx Curl	Version 7.18.2
Haxx Curl	Version 7.19.0
Haxx Curl	Version 7.19.1
Haxx Curl	Version 7.19.2
Haxx Curl	Version 7.19.3
Haxx Curl	Version 7.19.4
Haxx Curl	Version 7.19.5
Haxx Curl	Version 7.19.6
Haxx Curl	Version 7.19.7
Haxx Curl	Version 7.20.0
Haxx Curl	Version 7.20.1
Haxx Curl	Version 7.21.0
Haxx Curl	Version 7.21.1
Haxx Curl	Version 7.21.2
Haxx Curl	Version 7.21.3
Haxx Curl	Version 7.21.4
Haxx Curl	Version 7.21.5
Haxx Curl	Version 7.21.6
Haxx Curl	Version 7.21.7
Haxx Curl	Version 7.22.0
Haxx Curl	Version 7.23.0
Haxx Curl	Version 7.23.1
Haxx Curl	Version 7.24.0
Haxx Curl	Version 7.25.0
Haxx Curl	Version 7.26.0
Haxx Curl	Version 7.27.0
Haxx Curl	Version 7.28.0
Haxx Curl	Version 7.28.1
Haxx Curl	Version 7.29.0
Haxx Curl	Version 7.30.0
Haxx Curl	Version 7.31.0
Haxx Curl	Version 7.32.0
Haxx Curl	Version 7.33.0
Haxx Curl	Version 7.34.0
Haxx Curl	Version 7.35.0
Haxx Libcurl	Version 7.10.6
Haxx Libcurl	Version 7.10.7
Haxx Libcurl	Version 7.10.8
Haxx Libcurl	Version 7.11.0
Haxx Libcurl	Version 7.11.1
Haxx Libcurl	Version 7.11.2
Haxx Libcurl	Version 7.12.0
Haxx Libcurl	Version 7.12.1
Haxx Libcurl	Version 7.12.2
Haxx Libcurl	Version 7.12.3
Haxx Libcurl	Version 7.13.0
Haxx Libcurl	Version 7.13.1
Haxx Libcurl	Version 7.13.2
Haxx Libcurl	Version 7.14.0
Haxx Libcurl	Version 7.14.1
Haxx Libcurl	Version 7.15.0
Haxx Libcurl	Version 7.15.1
Haxx Libcurl	Version 7.15.2
Haxx Libcurl	Version 7.15.3
Haxx Libcurl	Version 7.15.4
Haxx Libcurl	Version 7.15.5
Haxx Libcurl	Version 7.16.0
Haxx Libcurl	Version 7.16.1
Haxx Libcurl	Version 7.16.2
Haxx Libcurl	Version 7.16.3
Haxx Libcurl	Version 7.16.4
Haxx Libcurl	Version 7.17.0
Haxx Libcurl	Version 7.17.1
Haxx Libcurl	Version 7.18.0
Haxx Libcurl	Version 7.18.1
Haxx Libcurl	Version 7.18.2
Haxx Libcurl	Version 7.19.0
Haxx Libcurl	Version 7.19.1
Haxx Libcurl	Version 7.19.2
Haxx Libcurl	Version 7.19.3
Haxx Libcurl	Version 7.19.4
Haxx Libcurl	Version 7.19.5
Haxx Libcurl	Version 7.19.6
Haxx Libcurl	Version 7.19.7
Haxx Libcurl	Version 7.20.0
Haxx Libcurl	Version 7.20.1
Haxx Libcurl	Version 7.21.0
Haxx Libcurl	Version 7.21.1
Haxx Libcurl	Version 7.21.2
Haxx Libcurl	Version 7.21.3
Haxx Libcurl	Version 7.21.4
Haxx Libcurl	Version 7.21.5
Haxx Libcurl	Version 7.21.6
Haxx Libcurl	Version 7.21.7
Haxx Libcurl	Version 7.22.0
Haxx Libcurl	Version 7.23.0
Haxx Libcurl	Version 7.23.1
Haxx Libcurl	Version 7.24.0
Haxx Libcurl	Version 7.25.0
Haxx Libcurl	Version 7.26.0
Haxx Libcurl	Version 7.27.0
Haxx Libcurl	Version 7.28.0
Haxx Libcurl	Version 7.28.1
Haxx Libcurl	Version 7.29.0
Haxx Libcurl	Version 7.30.0
Haxx Libcurl	Version 7.31.0
Haxx Libcurl	Version 7.32.0
Haxx Libcurl	Version 7.33.0
Haxx Libcurl	Version 7.34.0
Haxx Libcurl	Version 7.35.0