https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:34:00.372023+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-5420 CVE-2016-5420 2026-10-07T11:34:00.388852+00:00

curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.

 https://cve.radiocsirt.org/vuln/usn-3048-1 USN-3048-1 — curl vulnerabilities 2026-10-07T11:34:00.388901+00:00

Affected: Ubuntu:14.04:LTS: curl, Ubuntu:16.04:LTS: curl

Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. (CVE-2016-5419)

It was discovered that curl incorrectly handled client certificates when reusing TLS connections. (CVE-2016-5420)

Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly reused a connection struct, contrary to expectations. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5421)