CVE-2016-7141

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2575.html
http://rhn.redhat.com/errata/RHSA-2016-2957.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/92754Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036739Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3558
https://bugzilla.redhat.com/show_bug.cgi?id=1373229Issue Tracking
https://curl.haxx.se/docs/adv_20160907.htmlPatch, Vendor Advisory
https://github.com/curl/curl/commit/curl-7_50_2~32Issue Tracking, Patch
https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
https://security.gentoo.org/glsa/201701-47
http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2575.html
http://rhn.redhat.com/errata/RHSA-2016-2957.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/92754Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036739Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3558
https://bugzilla.redhat.com/show_bug.cgi?id=1373229Issue Tracking
https://curl.haxx.se/docs/adv_20160907.htmlPatch, Vendor Advisory
https://github.com/curl/curl/commit/curl-7_50_2~32Issue Tracking, Patch
https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
https://security.gentoo.org/glsa/201701-47

Timeline

Published: Oct 3, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-71425.9The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to CVE-2016-71438.1The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and cons CVE-2016-71448.1The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certific CVE-2016-71459.8The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequentl CVE-2016-71466.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, relat CVE-2016-71476.1Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x CVE-2016-71486.1MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross CVE-2016-71496.1Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via CVE-2016-71505.4Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script o CVE-2016-71515.5Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.CVE-2016-71525.3The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it eas CVE-2016-71535.3The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it ea