https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:47:56 +0000 https://cve.radiocsirt.org/vuln/cve-2016-5420 <p>curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.</p> <p>curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.</p> https://cve.radiocsirt.org/vuln/cve-2016-5420 https://cve.radiocsirt.org/vuln/usn-3048-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl, Ubuntu:16.04:LTS: curl</p> <p>Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. (CVE-2016-5419)</p> <p>It was discovered that curl incorrectly handled client certificates when reusing TLS connections. (CVE-2016-5420)</p> <p>Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly reused a connection struct, contrary to expectations. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5421)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: curl, Ubuntu:16.04:LTS: curl</p> <p>Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. (CVE-2016-5419)</p> <p>It was discovered that curl incorrectly handled client certificates when reusing TLS connections. (CVE-2016-5420)</p> <p>Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly reused a connection struct, contrary to expectations. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5421)</p> https://cve.radiocsirt.org/vuln/usn-3048-1