Detections
Analytics
Alpine: multiple curl packages, libcurl: security update to 7.50.0-r0 (deprecated)
high Tenable Cloud Security Plugin ID 401020
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has
changed, which allows remote attackers to bypass intended restrictions by resuming a session.
(CVE-2016-5419)
- curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to
reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a
previously created connection with a different client certificate. (CVE-2016-5420)
- Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used
or possibly have unspecified other impact via unknown vectors. (CVE-2016-5421)
See Also
https://git.alpinelinux.org/aports/commit/?id=ad87dec75adfbd5c5eaad0d7f01b67de49caeb17
https://git.alpinelinux.org/aports/commit/?id=da2c76f8a5b41b865d6af208d9bc32764eec75a6
Plugin Details
Severity: High
ID: 401020
Version: Revision 1.22
Type: Local
Published: 8/16/2023
Updated: 1/17/2024
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2016-5421
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/4/2016
Vulnerability Publication Date: 8/3/2016