CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3145

The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.65

EPSS Ranking 98.3%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2015-3145

Haxx » Curl » Version: 7.31.0

cpe:2.3:a:haxx:curl:7.31.0
Haxx » Curl » Version: 7.32.0

cpe:2.3:a:haxx:curl:7.32.0
Haxx » Curl » Version: 7.33.0

cpe:2.3:a:haxx:curl:7.33.0
Haxx » Curl » Version: 7.34.0

cpe:2.3:a:haxx:curl:7.34.0
Haxx » Curl » Version: 7.35.0

cpe:2.3:a:haxx:curl:7.35.0
Haxx » Curl » Version: 7.36.0

cpe:2.3:a:haxx:curl:7.36.0
Haxx » Curl » Version: 7.37.0

cpe:2.3:a:haxx:curl:7.37.0
Haxx » Curl » Version: 7.37.1

cpe:2.3:a:haxx:curl:7.37.1
Haxx » Curl » Version: 7.38.0

cpe:2.3:a:haxx:curl:7.38.0
Haxx » Curl » Version: 7.39.0

cpe:2.3:a:haxx:curl:7.39.0
Haxx » Curl » Version: 7.40.0

cpe:2.3:a:haxx:curl:7.40.0
Haxx » Curl » Version: 7.41.0

cpe:2.3:a:haxx:curl:7.41.0
Haxx » Libcurl » Version: 7.30.0

cpe:2.3:a:haxx:libcurl:7.30.0
Haxx » Libcurl » Version: 7.31.0

cpe:2.3:a:haxx:libcurl:7.31.0
Haxx » Libcurl » Version: 7.32.0

cpe:2.3:a:haxx:libcurl:7.32.0
Haxx » Libcurl » Version: 7.33.0

cpe:2.3:a:haxx:libcurl:7.33.0
Haxx » Libcurl » Version: 7.34.0

cpe:2.3:a:haxx:libcurl:7.34.0
Haxx » Libcurl » Version: 7.35.0

cpe:2.3:a:haxx:libcurl:7.35.0
Haxx » Libcurl » Version: 7.36.0

cpe:2.3:a:haxx:libcurl:7.36.0
Haxx » Libcurl » Version: 7.37.0

cpe:2.3:a:haxx:libcurl:7.37.0
Haxx » Libcurl » Version: 7.37.1

cpe:2.3:a:haxx:libcurl:7.37.1
Haxx » Libcurl » Version: 7.38.0

cpe:2.3:a:haxx:libcurl:7.38.0
Haxx » Libcurl » Version: 7.39

cpe:2.3:a:haxx:libcurl:7.39
Haxx » Libcurl » Version: 7.40.0

cpe:2.3:a:haxx:libcurl:7.40.0
Haxx » Libcurl » Version: 7.41.0

cpe:2.3:a:haxx:libcurl:7.41.0
Hp » System Management Homepage » Version: N/A

cpe:2.3:a:hp:system_management_homepage:-
Hp » System Management Homepage » Version: 2.0.0

cpe:2.3:a:hp:system_management_homepage:2.0.0
Hp » System Management Homepage » Version: 2.0.1

cpe:2.3:a:hp:system_management_homepage:2.0.1
Hp » System Management Homepage » Version: 2.0.1.104

cpe:2.3:a:hp:system_management_homepage:2.0.1.104
Hp » System Management Homepage » Version: 2.0.2

cpe:2.3:a:hp:system_management_homepage:2.0.2
Hp » System Management Homepage » Version: 2.0.2.106

cpe:2.3:a:hp:system_management_homepage:2.0.2.106
Hp » System Management Homepage » Version: 2.1

cpe:2.3:a:hp:system_management_homepage:2.1
Hp » System Management Homepage » Version: 2.1.0-103

cpe:2.3:a:hp:system_management_homepage:2.1.0-103
Hp » System Management Homepage » Version: 2.1.0-103(a)

cpe:2.3:a:hp:system_management_homepage:2.1.0-103(a)
Hp » System Management Homepage » Version: 2.1.0-109

cpe:2.3:a:hp:system_management_homepage:2.1.0-109
Hp » System Management Homepage » Version: 2.1.0-118

cpe:2.3:a:hp:system_management_homepage:2.1.0-118
Hp » System Management Homepage » Version: 2.1.0.121

cpe:2.3:a:hp:system_management_homepage:2.1.0.121
Hp » System Management Homepage » Version: 2.1.1

cpe:2.3:a:hp:system_management_homepage:2.1.1
Hp » System Management Homepage » Version: 2.1.10

cpe:2.3:a:hp:system_management_homepage:2.1.10
Hp » System Management Homepage » Version: 2.1.10-186

cpe:2.3:a:hp:system_management_homepage:2.1.10-186
Hp » System Management Homepage » Version: 2.1.10.186

cpe:2.3:a:hp:system_management_homepage:2.1.10.186
Hp » System Management Homepage » Version: 2.1.11

cpe:2.3:a:hp:system_management_homepage:2.1.11
Hp » System Management Homepage » Version: 2.1.11-197

cpe:2.3:a:hp:system_management_homepage:2.1.11-197
Hp » System Management Homepage » Version: 2.1.11.197

cpe:2.3:a:hp:system_management_homepage:2.1.11.197
Hp » System Management Homepage » Version: 2.1.12-118

cpe:2.3:a:hp:system_management_homepage:2.1.12-118
Hp » System Management Homepage » Version: 2.1.12-200

cpe:2.3:a:hp:system_management_homepage:2.1.12-200
Hp » System Management Homepage » Version: 2.1.12.201

cpe:2.3:a:hp:system_management_homepage:2.1.12.201
Hp » System Management Homepage » Version: 2.1.14

cpe:2.3:a:hp:system_management_homepage:2.1.14
Hp » System Management Homepage » Version: 2.1.14.20

cpe:2.3:a:hp:system_management_homepage:2.1.14.20
Hp » System Management Homepage » Version: 2.1.15

cpe:2.3:a:hp:system_management_homepage:2.1.15
Hp » System Management Homepage » Version: 2.1.15-210

cpe:2.3:a:hp:system_management_homepage:2.1.15-210
Hp » System Management Homepage » Version: 2.1.15.210

cpe:2.3:a:hp:system_management_homepage:2.1.15.210
Hp » System Management Homepage » Version: 2.1.2

cpe:2.3:a:hp:system_management_homepage:2.1.2
Hp » System Management Homepage » Version: 2.1.2-127

cpe:2.3:a:hp:system_management_homepage:2.1.2-127
Hp » System Management Homepage » Version: 2.1.2.127

cpe:2.3:a:hp:system_management_homepage:2.1.2.127
Hp » System Management Homepage » Version: 2.1.3

cpe:2.3:a:hp:system_management_homepage:2.1.3
Hp » System Management Homepage » Version: 2.1.3.132

cpe:2.3:a:hp:system_management_homepage:2.1.3.132
Hp » System Management Homepage » Version: 2.1.4

cpe:2.3:a:hp:system_management_homepage:2.1.4
Hp » System Management Homepage » Version: 2.1.4-143

cpe:2.3:a:hp:system_management_homepage:2.1.4-143
Hp » System Management Homepage » Version: 2.1.4.143

cpe:2.3:a:hp:system_management_homepage:2.1.4.143
Hp » System Management Homepage » Version: 2.1.5

cpe:2.3:a:hp:system_management_homepage:2.1.5
Hp » System Management Homepage » Version: 2.1.5-146

cpe:2.3:a:hp:system_management_homepage:2.1.5-146
Hp » System Management Homepage » Version: 2.1.5.146

cpe:2.3:a:hp:system_management_homepage:2.1.5.146
Hp » System Management Homepage » Version: 2.1.6

cpe:2.3:a:hp:system_management_homepage:2.1.6
Hp » System Management Homepage » Version: 2.1.6-156

cpe:2.3:a:hp:system_management_homepage:2.1.6-156
Hp » System Management Homepage » Version: 2.1.6.156

cpe:2.3:a:hp:system_management_homepage:2.1.6.156
Hp » System Management Homepage » Version: 2.1.7

cpe:2.3:a:hp:system_management_homepage:2.1.7
Hp » System Management Homepage » Version: 2.1.7-168

cpe:2.3:a:hp:system_management_homepage:2.1.7-168
Hp » System Management Homepage » Version: 2.1.7.168

cpe:2.3:a:hp:system_management_homepage:2.1.7.168
Hp » System Management Homepage » Version: 2.1.8

cpe:2.3:a:hp:system_management_homepage:2.1.8
Hp » System Management Homepage » Version: 2.1.8-177

cpe:2.3:a:hp:system_management_homepage:2.1.8-177
Hp » System Management Homepage » Version: 2.1.8.179

cpe:2.3:a:hp:system_management_homepage:2.1.8.179
Hp » System Management Homepage » Version: 2.1.9

cpe:2.3:a:hp:system_management_homepage:2.1.9
Hp » System Management Homepage » Version: 2.1.9-178

cpe:2.3:a:hp:system_management_homepage:2.1.9-178
Hp » System Management Homepage » Version: 2.2.6

cpe:2.3:a:hp:system_management_homepage:2.2.6
Hp » System Management Homepage » Version: 2.2.8

cpe:2.3:a:hp:system_management_homepage:2.2.8
Hp » System Management Homepage » Version: 3.0.0

cpe:2.3:a:hp:system_management_homepage:3.0.0
Hp » System Management Homepage » Version: 3.0.0-68

cpe:2.3:a:hp:system_management_homepage:3.0.0-68
Hp » System Management Homepage » Version: 3.0.0.64

cpe:2.3:a:hp:system_management_homepage:3.0.0.64
Hp » System Management Homepage » Version: 3.0.1

cpe:2.3:a:hp:system_management_homepage:3.0.1
Hp » System Management Homepage » Version: 3.0.1-73

cpe:2.3:a:hp:system_management_homepage:3.0.1-73
Hp » System Management Homepage » Version: 3.0.1.73

cpe:2.3:a:hp:system_management_homepage:3.0.1.73
Hp » System Management Homepage » Version: 3.0.2

cpe:2.3:a:hp:system_management_homepage:3.0.2
Hp » System Management Homepage » Version: 3.0.2-77

cpe:2.3:a:hp:system_management_homepage:3.0.2-77
Hp » System Management Homepage » Version: 3.0.2.77

cpe:2.3:a:hp:system_management_homepage:3.0.2.77
Hp » System Management Homepage » Version: 3.2.2

cpe:2.3:a:hp:system_management_homepage:3.2.2
Hp » System Management Homepage » Version: 3.2.7

cpe:2.3:a:hp:system_management_homepage:3.2.7
Hp » System Management Homepage » Version: 6.0

cpe:2.3:a:hp:system_management_homepage:6.0
Hp » System Management Homepage » Version: 6.0.0-95

cpe:2.3:a:hp:system_management_homepage:6.0.0-95
Hp » System Management Homepage » Version: 6.0.0.96

cpe:2.3:a:hp:system_management_homepage:6.0.0.96
Hp » System Management Homepage » Version: 6.1

cpe:2.3:a:hp:system_management_homepage:6.1
Hp » System Management Homepage » Version: 6.1.0-103

cpe:2.3:a:hp:system_management_homepage:6.1.0-103
Hp » System Management Homepage » Version: 6.1.0.102

cpe:2.3:a:hp:system_management_homepage:6.1.0.102
Hp » System Management Homepage » Version: 6.2.0

cpe:2.3:a:hp:system_management_homepage:6.2.0
Hp » System Management Homepage » Version: 6.2.2.7

cpe:2.3:a:hp:system_management_homepage:6.2.2.7
Hp » System Management Homepage » Version: 6.3.0

cpe:2.3:a:hp:system_management_homepage:6.3.0
Hp » System Management Homepage » Version: 6.3.1

cpe:2.3:a:hp:system_management_homepage:6.3.1
Hp » System Management Homepage » Version: 7.0

cpe:2.3:a:hp:system_management_homepage:7.0
Hp » System Management Homepage » Version: 7.1

cpe:2.3:a:hp:system_management_homepage:7.1
Hp » System Management Homepage » Version: 7.2

cpe:2.3:a:hp:system_management_homepage:7.2
Hp » System Management Homepage » Version: 7.2.1

cpe:2.3:a:hp:system_management_homepage:7.2.1
Hp » System Management Homepage » Version: 7.4.0

cpe:2.3:a:hp:system_management_homepage:7.4.0
Hp » System Management Homepage » Version: 7.5.3.1

cpe:2.3:a:hp:system_management_homepage:7.5.3.1
Apple » Mac Os X » Version: 10.10.0

cpe:2.3:o:apple:mac_os_x:10.10.0
Apple » Mac Os X » Version: 10.10.1

cpe:2.3:o:apple:mac_os_x:10.10.1
Apple » Mac Os X » Version: 10.10.2

cpe:2.3:o:apple:mac_os_x:10.10.2
Apple » Mac Os X » Version: 10.10.3

cpe:2.3:o:apple:mac_os_x:10.10.3
Apple » Mac Os X » Version: 10.10.4

cpe:2.3:o:apple:mac_os_x:10.10.4
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Canonical » Ubuntu Linux » Version: 15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Fedoraproject » Fedora » Version: 21

cpe:2.3:o:fedoraproject:fedora:21
Fedoraproject » Fedora » Version: 22

cpe:2.3:o:fedoraproject:fedora:22
Opensuse » Opensuse » Version: 13.1

cpe:2.3:o:opensuse:opensuse:13.1
Opensuse » Opensuse » Version: 13.2

cpe:2.3:o:opensuse:opensuse:13.2
Oracle » Solaris » Version: 11.3

cpe:2.3:o:oracle:solaris:11.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3145

Products

Pricing

Contact Us