Total vulnerabilities in the database
cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| haxx / curl | 7.40.0 | 7.40.0.x |
| haxx / libcurl | 7.40.0 | 7.40.0.x |
| haxx / curl | 7.42.0 | 7.42.0.x |
| haxx / libcurl | 7.42.1 | 7.42.1.x |
| haxx / libcurl | 7.41.0 | 7.41.0.x |
| haxx / curl | 7.42.1 | 7.42.1.x |
| haxx / curl | 7.41.0 | 7.41.0.x |
| haxx / libcurl | 7.42.0 | 7.42.0.x |