Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-2522

curl and libcurl 7.27.0 through 7.35.0, when running on Windows and using the SChannel/Winssl TLS backend, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when accessing a URL that uses a numerical IP address, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.8%
CVSS Severity
CVSS v2 Score 4.0
References
Products affected by CVE-2014-2522
  • Haxx » Curl » Version: 7.27.0
    cpe:2.3:a:haxx:curl:7.27.0
  • Haxx » Curl » Version: 7.28.0
    cpe:2.3:a:haxx:curl:7.28.0
  • Haxx » Curl » Version: 7.28.1
    cpe:2.3:a:haxx:curl:7.28.1
  • Haxx » Curl » Version: 7.29.0
    cpe:2.3:a:haxx:curl:7.29.0
  • Haxx » Curl » Version: 7.30.0
    cpe:2.3:a:haxx:curl:7.30.0
  • Haxx » Curl » Version: 7.31.0
    cpe:2.3:a:haxx:curl:7.31.0
  • Haxx » Curl » Version: 7.32.0
    cpe:2.3:a:haxx:curl:7.32.0
  • Haxx » Curl » Version: 7.33.0
    cpe:2.3:a:haxx:curl:7.33.0
  • Haxx » Curl » Version: 7.34.0
    cpe:2.3:a:haxx:curl:7.34.0
  • Haxx » Curl » Version: 7.35.0
    cpe:2.3:a:haxx:curl:7.35.0
  • Haxx » Libcurl » Version: 7.27.0
    cpe:2.3:a:haxx:libcurl:7.27.0
  • Haxx » Libcurl » Version: 7.28.0
    cpe:2.3:a:haxx:libcurl:7.28.0
  • Haxx » Libcurl » Version: 7.28.1
    cpe:2.3:a:haxx:libcurl:7.28.1
  • Haxx » Libcurl » Version: 7.29.0
    cpe:2.3:a:haxx:libcurl:7.29.0
  • Haxx » Libcurl » Version: 7.30.0
    cpe:2.3:a:haxx:libcurl:7.30.0
  • Haxx » Libcurl » Version: 7.31.0
    cpe:2.3:a:haxx:libcurl:7.31.0
  • Haxx » Libcurl » Version: 7.32.0
    cpe:2.3:a:haxx:libcurl:7.32.0
  • Haxx » Libcurl » Version: 7.33.0
    cpe:2.3:a:haxx:libcurl:7.33.0
  • Haxx » Libcurl » Version: 7.34.0
    cpe:2.3:a:haxx:libcurl:7.34.0
  • Haxx » Libcurl » Version: 7.35.0
    cpe:2.3:a:haxx:libcurl:7.35.0
  • Haxx » Libcurl » Version: 7.36.0
    cpe:2.3:a:haxx:libcurl:7.36.0
  • Microsoft » Windows » Version: N/A
    cpe:2.3:o:microsoft:windows:-
  • Microsoft » Windows » Version: 1.0
    cpe:2.3:o:microsoft:windows:1.0
  • Microsoft » Windows » Version: 2.0
    cpe:2.3:o:microsoft:windows:2.0
  • Microsoft » Windows » Version: 2000
    cpe:2.3:o:microsoft:windows:2000
  • Microsoft » Windows » Version: 3.0
    cpe:2.3:o:microsoft:windows:3.0
  • Microsoft » Windows » Version: 3.1
    cpe:2.3:o:microsoft:windows:3.1
  • Microsoft » Windows » Version: 3.11
    cpe:2.3:o:microsoft:windows:3.11
  • Microsoft » Windows » Version: server_2008
    cpe:2.3:o:microsoft:windows:server_2008
  • Microsoft » Windows » Version: vista
    cpe:2.3:o:microsoft:windows:vista


Products
Pricing
Contact Us

Shodan ® - All rights reserved