Skip to content
OpenAdvisories
Unscored DSA-3232-1 2 CVEs

curl - security update

Published Apr 22, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 curl 7.26.0-1+wheezy13
Debian · 8 curl 7.38.0-4+deb8u1

Vulnerabilities 2

  • Unscored —
    CVE-2015-3143 EPSS 11%

    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to conn…

  • Unscored —
    CVE-2015-3148 EPSS 14%

    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …