CVE-2014-0139

Published: Apr 15, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Affected (130)

Products: Haxx: Curl, Libcurl

Haxx

2 products

Curl

Libcurl

Configuration A

130 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	Version 7.10.6
Haxx Curl	Version 7.10.7
Haxx Curl	Version 7.10.8
Haxx Curl	Version 7.11.0
Haxx Curl	Version 7.11.1
Haxx Curl	Version 7.11.2
Haxx Curl	Version 7.12.0
Haxx Curl	Version 7.12.1
Haxx Curl	Version 7.12.2
Haxx Curl	Version 7.12.3
Haxx Curl	Version 7.13.0
Haxx Curl	Version 7.13.1
Haxx Curl	Version 7.13.2
Haxx Curl	Version 7.14.0
Haxx Curl	Version 7.14.1
Haxx Curl	Version 7.15.0
Haxx Curl	Version 7.15.1
Haxx Curl	Version 7.15.2
Haxx Curl	Version 7.15.3
Haxx Curl	Version 7.15.4
Haxx Curl	Version 7.15.5
Haxx Curl	Version 7.16.0
Haxx Curl	Version 7.16.1
Haxx Curl	Version 7.16.2
Haxx Curl	Version 7.16.3
Haxx Curl	Version 7.16.4
Haxx Curl	Version 7.17.0
Haxx Curl	Version 7.17.1
Haxx Curl	Version 7.18.0
Haxx Curl	Version 7.18.1
Haxx Curl	Version 7.18.2
Haxx Curl	Version 7.19.0
Haxx Curl	Version 7.19.1
Haxx Curl	Version 7.19.2
Haxx Curl	Version 7.19.3
Haxx Curl	Version 7.19.4
Haxx Curl	Version 7.19.5
Haxx Curl	Version 7.19.6
Haxx Curl	Version 7.19.7
Haxx Curl	Version 7.20.0
Haxx Curl	Version 7.20.1
Haxx Curl	Version 7.21.0
Haxx Curl	Version 7.21.1
Haxx Curl	Version 7.21.2
Haxx Curl	Version 7.21.3
Haxx Curl	Version 7.21.4
Haxx Curl	Version 7.21.5
Haxx Curl	Version 7.21.6
Haxx Curl	Version 7.21.7
Haxx Curl	Version 7.22.0
Haxx Curl	Version 7.23.0
Haxx Curl	Version 7.23.1
Haxx Curl	Version 7.24.0
Haxx Curl	Version 7.25.0
Haxx Curl	Version 7.26.0
Haxx Curl	Version 7.27.0
Haxx Curl	Version 7.28.0
Haxx Curl	Version 7.28.1
Haxx Curl	Version 7.29.0
Haxx Curl	Version 7.30.0
Haxx Curl	Version 7.31.0
Haxx Curl	Version 7.32.0
Haxx Curl	Version 7.33.0
Haxx Curl	Version 7.34.0
Haxx Curl	Version 7.35.0
Haxx Libcurl	Version 7.10.6
Haxx Libcurl	Version 7.10.7
Haxx Libcurl	Version 7.10.8
Haxx Libcurl	Version 7.11.0
Haxx Libcurl	Version 7.11.1
Haxx Libcurl	Version 7.11.2
Haxx Libcurl	Version 7.12.0
Haxx Libcurl	Version 7.12.1
Haxx Libcurl	Version 7.12.2
Haxx Libcurl	Version 7.12.3
Haxx Libcurl	Version 7.13.0
Haxx Libcurl	Version 7.13.1
Haxx Libcurl	Version 7.13.2
Haxx Libcurl	Version 7.14.0
Haxx Libcurl	Version 7.14.1
Haxx Libcurl	Version 7.15.0
Haxx Libcurl	Version 7.15.1
Haxx Libcurl	Version 7.15.2
Haxx Libcurl	Version 7.15.3
Haxx Libcurl	Version 7.15.4
Haxx Libcurl	Version 7.15.5
Haxx Libcurl	Version 7.16.0
Haxx Libcurl	Version 7.16.1
Haxx Libcurl	Version 7.16.2
Haxx Libcurl	Version 7.16.3
Haxx Libcurl	Version 7.16.4
Haxx Libcurl	Version 7.17.0
Haxx Libcurl	Version 7.17.1
Haxx Libcurl	Version 7.18.0
Haxx Libcurl	Version 7.18.1
Haxx Libcurl	Version 7.18.2
Haxx Libcurl	Version 7.19.0
Haxx Libcurl	Version 7.19.1
Haxx Libcurl	Version 7.19.2
Haxx Libcurl	Version 7.19.3
Haxx Libcurl	Version 7.19.4
Haxx Libcurl	Version 7.19.5
Haxx Libcurl	Version 7.19.6
Haxx Libcurl	Version 7.19.7
Haxx Libcurl	Version 7.20.0
Haxx Libcurl	Version 7.20.1
Haxx Libcurl	Version 7.21.0
Haxx Libcurl	Version 7.21.1
Haxx Libcurl	Version 7.21.2
Haxx Libcurl	Version 7.21.3
Haxx Libcurl	Version 7.21.4
Haxx Libcurl	Version 7.21.5
Haxx Libcurl	Version 7.21.6
Haxx Libcurl	Version 7.21.7
Haxx Libcurl	Version 7.22.0
Haxx Libcurl	Version 7.23.0
Haxx Libcurl	Version 7.23.1
Haxx Libcurl	Version 7.24.0
Haxx Libcurl	Version 7.25.0
Haxx Libcurl	Version 7.26.0
Haxx Libcurl	Version 7.27.0
Haxx Libcurl	Version 7.28.0
Haxx Libcurl	Version 7.28.1
Haxx Libcurl	Version 7.29.0
Haxx Libcurl	Version 7.30.0
Haxx Libcurl	Version 7.31.0
Haxx Libcurl	Version 7.32.0
Haxx Libcurl	Version 7.33.0
Haxx Libcurl	Version 7.34.0
Haxx Libcurl	Version 7.35.0