Skip to content
OpenAdvisories
Unscored USN-2399-1 1 CVE

curl vulnerability

Published Nov 10, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Symeon Paraschoudis discovered that curl incorrectly handled memory when
being used with CURLOPT_COPYPOSTFIELDS and curl_easy_duphandle(). This may
result in sensitive data being incorrectly sent to the remote server.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS curl 7.35.0-1ubuntu2.2

Vulnerabilities 1

  • Unscored —
    CVE-2014-3707

    The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option,…

    curl curl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3707