CVE-2015-3153

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.25%

Published

May 1, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

Weaknesses (CWE)

CWE-200

Affected Products (12)

oracle · enterprise_manager_ops_centervulnerable

haxx · curlvulnerable

haxx · libcurlvulnerable

canonical · ubuntu_linuxvulnerable

apple · mac_os_xvulnerable

debian · debian_linuxvulnerable

References (20)

http://curl.haxx.se/docs/adv_20150429.html

Vendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html

http://www.debian.org/security/2015/dsa-3240

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

PatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

PatchThird Party Advisory

http://www.securityfocus.com/bid/74408

http://www.securitytracker.com/id/1032233

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2591-1

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10131

https://support.apple.com/kb/HT205031

Third Party Advisory

http://curl.haxx.se/docs/adv_20150429.html

Vendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html

http://www.debian.org/security/2015/dsa-3240

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

KEV Catalog EPSS Scores Vendors All CVEs