Unscored DLA-211-1 2 CVEs

curl - security update

Published Apr 29, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	curl	7.21.0-2.1+squeeze12

Vulnerabilities 2

Unscored —

CVE-2015-3143 EPSS 11%

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to conn…

curl curl Debian Ubuntu

Apr 24, 2015
Unscored —

CVE-2015-3148 EPSS 14%

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …

curl curl Debian Ubuntu

Apr 24, 2015