CVE-2016-9594
Medium
Description
curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.
SeverityMedium
CVSS6.5
Exploit probability—
ProductHaxx Curl
PublishedApr 23, 2018
First seenApr 23, 2018
Weakness typeCWE-665CWE-665
How to fix
Update
- haxx curl7.52.1 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx curl | v < 7.52.1 | 7.52.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.