https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T00:46:57.809944+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3613 CVE-2014-3613 2026-09-29T00:46:57.871154+00:00

cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.

 https://vulnerability.circl.lu/vuln/usn-2346-1 USN-2346-1 — curl vulnerabilities 2026-09-29T00:46:57.871247+00:00

Affected: Ubuntu:14.04:LTS: curl

Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and malicious sites being able to set cookies for others. (CVE-2014-3613)

Tim Ruehsen discovered that curl incorrectly allowed cookies to be set for Top Level Domains (TLDs). This could allow a malicious site to set a cookie that gets sent to other sites. (CVE-2014-3620)