VDB
DEBIAN-CVE-2014-0015
DEBIAN-CVE-2014-0015
PUBLISHED
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | curl | 0, 0, 0 |
| Debian:11 | curl | 0, 0, 0 |
| Debian:14 | curl | 0, 0, 0 |
| Debian:12 | curl | 0, 0, 0 |
Timeline
- Feb 2, 2014 CVE Published
- Apr 28, 2026 CVE Updated