CVE-2015-3153: Infoleak
The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3153?
CVE-2015-3153 is classified as a high severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2015-3153?
To fix CVE-2015-3153, you should upgrade to cURL and libcurl version 7.42.1 or later.
Which software is affected by CVE-2015-3153?
CVE-2015-3153 affects multiple versions of cURL, libcurl, and Oracle Enterprise Manager Ops Center.
What is the impact of CVE-2015-3153?
The impact of CVE-2015-3153 includes the risk of remote proxy servers accessing sensitive information through custom HTTP headers.
Is there a patch available for CVE-2015-3153?
Yes, a patch is available in the form of upgraded versions of cURL and libcurl, specifically version 7.42.1 and later.