PT-2015-6076 · Curl+4 · Libcurl+4

Hanno Böck · Published 2015-04-22 · Updated 2025-05-23 · CVE-2015-3145

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libcurl versions 7.31.0 through 7.41.0

Description The issue arises from the sanitize cookie path() function not properly validating input, specifically when encountering a cookie path containing only a double-quote character. This can lead to a denial of service (out-of-bounds write and crash) or potentially other unspecified impacts. The vulnerability is related to how libcurl handles HTTP cookies, particularly the "path" element associated with each cookie, as documented in RFC 6265. The problem occurs when libcurl is explicitly set to enable cookie parsing, and it can result in unnoticed memory corruption, a crash, or potentially worse outcomes.

Recommendations For libcurl versions 7.31.0 through 7.41.0, consider disabling cookie parsing until a fix is applied to prevent potential exploitation. As a temporary workaround, avoid using the sanitize cookie path() function or restrict its use to minimize the risk of memory corruption or crashes.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-124

Related Identifiers

ALT-PU-2015-1396

CVE-2015-3145

DSA-3232-1

MGASA-2015-0179

OPENSUSE-SU-2024:10303-1

SUSE-SU-2015:0990-1

USN-2591-1

Affected Products

Alt Linux

Junos

Suse

Ubuntu

Libcurl

References · 93

• https://ubuntu.com/security/CVE-2015-3144 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-3145 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148 · Security Note
• https://osv.dev/vulnerability/USN-2591-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-3145 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156250.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157017.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155957.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-3145 · Security Note
• https://osv.dev/vulnerability/CURL-CVE-2015-3145 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/curl · Vendor Advisory
• https://debian.org/security/2015/dsa-3232 · Vendor Advisory