CVE-2016-3739: Input Validation

Published May 20, 2016

Updated

The (1) mbedconnectstep1 function in lib/vtls/mbedtls.c and (2) polarsslconnectstep1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.

Affected Software

37 affected components

haxx curl=7.21.0

haxx curl=7.21.1

haxx curl=7.21.2

haxx curl=7.21.3

haxx curl=7.21.4

haxx curl=7.21.5

haxx curl=7.21.6

haxx curl=7.21.7

haxx curl=7.22.0

haxx curl=7.23.0

haxx curl=7.23.1

haxx curl=7.24.0

haxx curl=7.25.0

haxx curl=7.26.0

haxx curl=7.27.0

haxx curl=7.28.0

haxx curl=7.28.1

haxx curl=7.29.0

haxx curl=7.30.0

haxx curl=7.31.0

haxx curl=7.32.0

haxx curl=7.33.0

haxx curl=7.34.0

haxx curl=7.35.0

haxx curl=7.36.0

haxx curl=7.38.0

haxx curl=7.39.0

haxx curl=7.40.0

haxx curl=7.41.0

haxx curl=7.42.0

haxx curl=7.42.1

haxx curl=7.43.0

haxx curl=7.44.0

haxx curl=7.45.0

haxx curl=7.46.0

haxx curl=7.47.0

haxx curl=7.48.0

Event History

May 20, 2016

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3739?

CVE-2016-3739 is classified as a high-severity vulnerability due to its potential to allow remote attackers to spoof servers.

How do I fix CVE-2016-3739?

To fix CVE-2016-3739, update cURL and libcurl to version 7.49.0 or later.

What versions of cURL are affected by CVE-2016-3739?

CVE-2016-3739 affects cURL and libcurl versions prior to 7.49.0, specifically versions 7.21.0 through 7.48.0.

What types of connections are impacted by CVE-2016-3739?

CVE-2016-3739 affects SSLv3 connections and TLS connections to resources identified by numerical IP addresses.

What are the consequences of CVE-2016-3739?

The consequences of CVE-2016-3739 include the potential for remote attackers to spoof servers, which could lead to data breaches or man-in-the-middle attacks.