NVD Vulnerability Detail

CVE-2014-0139

Summary	cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Publication Date	April 15, 2014, 11:55 p.m.
Registration Date	Jan. 26, 2021, 3:04 p.m.
Last Update	Nov. 21, 2024, 11:01 a.m.

CVSS2.0 : MEDIUM
Score	5.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:haxx:curl:7.21.3:::::::*
cpe:2.3:a:haxx:curl:7.15.1:::::::*
cpe:2.3:a:haxx:curl:7.24.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.6:::::::*
cpe:2.3:a:haxx:curl:7.16.1:::::::*
cpe:2.3:a:haxx:curl:7.13.0:::::::*
cpe:2.3:a:haxx:curl:7.35.0:::::::*
cpe:2.3:a:haxx:curl:7.18.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.2:::::::*
cpe:2.3:a:haxx:curl:7.14.1:::::::*
cpe:2.3:a:haxx:curl:7.21.5:::::::*
cpe:2.3:a:haxx:curl:7.21.1:::::::*
cpe:2.3:a:haxx:curl:7.12.1:::::::*
cpe:2.3:a:haxx:curl:7.32.0:::::::*
cpe:2.3:a:haxx:curl:7.16.2:::::::*
cpe:2.3:a:haxx:libcurl:7.11.2:::::::*
cpe:2.3:a:haxx:curl:7.17.1:::::::*
cpe:2.3:a:haxx:curl:7.19.1:::::::*
cpe:2.3:a:haxx:libcurl:7.17.1:::::::*
cpe:2.3:a:haxx:libcurl:7.19.4:::::::*
cpe:2.3:a:haxx:libcurl:7.30.0:::::::*
cpe:2.3:a:haxx:libcurl:7.25.0:::::::*
cpe:2.3:a:haxx:curl:7.12.2:::::::*
cpe:2.3:a:haxx:curl:7.15.2:::::::*
cpe:2.3:a:haxx:libcurl:7.12.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.3:::::::*
cpe:2.3:a:haxx:libcurl:7.16.4:::::::*
cpe:2.3:a:haxx:curl:7.19.6:::::::*
cpe:2.3:a:haxx:curl:7.29.0:::::::*
cpe:2.3:a:haxx:curl:7.15.0:::::::*
cpe:2.3:a:haxx:libcurl:7.12.3:::::::*
cpe:2.3:a:haxx:curl:7.22.0:::::::*
cpe:2.3:a:haxx:curl:7.33.0:::::::*
cpe:2.3:a:haxx:libcurl:7.33.0:::::::*
cpe:2.3:a:haxx:libcurl:7.18.0:::::::*
cpe:2.3:a:haxx:curl:7.16.0:::::::*
cpe:2.3:a:haxx:curl:7.10.6:::::::*
cpe:2.3:a:haxx:curl:7.13.1:::::::*
cpe:2.3:a:haxx:libcurl:7.23.0:::::::*
cpe:2.3:a:haxx:curl:7.10.8:::::::*
cpe:2.3:a:haxx:libcurl:7.19.1:::::::*
cpe:2.3:a:haxx:curl:7.20.0:::::::*
cpe:2.3:a:haxx:libcurl:7.26.0:::::::*
cpe:2.3:a:haxx:curl:7.20.1:::::::*
cpe:2.3:a:haxx:curl:7.26.0:::::::*
cpe:2.3:a:haxx:curl:7.19.7:::::::*
cpe:2.3:a:haxx:curl:7.19.3:::::::*
cpe:2.3:a:haxx:curl:7.23.1:::::::*
cpe:2.3:a:haxx:libcurl:7.15.2:::::::*
cpe:2.3:a:haxx:libcurl:7.16.0:::::::*
cpe:2.3:a:haxx:curl:7.25.0:::::::*
cpe:2.3:a:haxx:libcurl:7.16.2:::::::*
cpe:2.3:a:haxx:libcurl:7.34.0:::::::*
cpe:2.3:a:haxx:libcurl:7.31.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.5:::::::*
cpe:2.3:a:haxx:libcurl:7.35.0:::::::*
cpe:2.3:a:haxx:libcurl:7.22.0:::::::*
cpe:2.3:a:haxx:libcurl:7.20.0:::::::*
cpe:2.3:a:haxx:curl:7.19.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.0:::::::*
cpe:2.3:a:haxx:curl:7.12.0:::::::*
cpe:2.3:a:haxx:libcurl:7.14.1:::::::*
cpe:2.3:a:haxx:libcurl:7.28.0:::::::*
cpe:2.3:a:haxx:libcurl:7.11.1:::::::*
cpe:2.3:a:haxx:libcurl:7.18.2:::::::*
cpe:2.3:a:haxx:libcurl:7.13.0:::::::*
cpe:2.3:a:haxx:curl:7.21.6:::::::*
cpe:2.3:a:haxx:libcurl:7.21.5:::::::*
cpe:2.3:a:haxx:libcurl:7.15.1:::::::*
cpe:2.3:a:haxx:curl:7.30.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.3:::::::*
cpe:2.3:a:haxx:curl:7.27.0:::::::*
cpe:2.3:a:haxx:libcurl:7.17.0:::::::*
cpe:2.3:a:haxx:curl:7.17.0:::::::*
cpe:2.3:a:haxx:libcurl:7.24.0:::::::*
cpe:2.3:a:haxx:curl:7.12.3:::::::*
cpe:2.3:a:haxx:libcurl:7.13.1:::::::*
cpe:2.3:a:haxx:libcurl:7.10.8:::::::*
cpe:2.3:a:haxx:libcurl:7.27.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.3:::::::*
cpe:2.3:a:haxx:curl:7.14.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.7:::::::*
cpe:2.3:a:haxx:curl:7.19.4:::::::*
cpe:2.3:a:haxx:curl:7.15.3:::::::*
cpe:2.3:a:haxx:libcurl:7.12.1:::::::*
cpe:2.3:a:haxx:curl:7.15.5:::::::*
cpe:2.3:a:haxx:curl:7.21.2:::::::*
cpe:2.3:a:haxx:libcurl:7.10.6:::::::*
cpe:2.3:a:haxx:curl:7.31.0:::::::*
cpe:2.3:a:haxx:libcurl:7.23.1:::::::*
cpe:2.3:a:haxx:curl:7.11.2:::::::*
cpe:2.3:a:haxx:curl:7.16.4:::::::*
cpe:2.3:a:haxx:libcurl:7.21.6:::::::*
cpe:2.3:a:haxx:libcurl:7.19.5:::::::*
cpe:2.3:a:haxx:curl:7.10.7:::::::*
cpe:2.3:a:haxx:libcurl:7.14.0:::::::*
cpe:2.3:a:haxx:curl:7.34.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.7:::::::*
cpe:2.3:a:haxx:libcurl:7.21.1:::::::*
cpe:2.3:a:haxx:curl:7.21.0:::::::*
cpe:2.3:a:haxx:curl:7.13.2:::::::*
cpe:2.3:a:haxx:libcurl:7.16.3:::::::*
cpe:2.3:a:haxx:libcurl:7.13.2:::::::*
cpe:2.3:a:haxx:curl:7.28.0:::::::*
cpe:2.3:a:haxx:curl:7.11.1:::::::*
cpe:2.3:a:haxx:curl:7.23.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.4:::::::*
cpe:2.3:a:haxx:libcurl:7.20.1:::::::*
cpe:2.3:a:haxx:curl:7.28.1:::::::*
cpe:2.3:a:haxx:libcurl:7.11.0:::::::*
cpe:2.3:a:haxx:curl:7.18.1:::::::*
cpe:2.3:a:haxx:libcurl:7.16.1:::::::*
cpe:2.3:a:haxx:curl:7.18.2:::::::*
cpe:2.3:a:haxx:libcurl:7.32.0:::::::*
cpe:2.3:a:haxx:curl:7.21.4:::::::*
cpe:2.3:a:haxx:libcurl:7.29.0:::::::*
cpe:2.3:a:haxx:curl:7.19.2:::::::*
cpe:2.3:a:haxx:curl:7.16.3:::::::*
cpe:2.3:a:haxx:libcurl:7.18.1:::::::*
cpe:2.3:a:haxx:libcurl:7.10.7:::::::*
cpe:2.3:a:haxx:curl:7.21.7:::::::*
cpe:2.3:a:haxx:libcurl:7.28.1:::::::*
cpe:2.3:a:haxx:curl:7.15.4:::::::*
cpe:2.3:a:haxx:libcurl:7.12.2:::::::*
cpe:2.3:a:haxx:curl:7.19.5:::::::*
cpe:2.3:a:haxx:libcurl:7.15.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.4:::::::*
cpe:2.3:a:haxx:libcurl:7.19.2:::::::*
cpe:2.3:a:haxx:curl:7.11.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://advisories.mageia.org/MGASA-2015-0165.html
2	http://advisories.mageia.org/MGASA-2015-0165.html
3	http://curl.haxx.se/docs/adv_20140326B.html	Vendor Advisory
4	http://curl.haxx.se/docs/adv_20140326B.html	Vendor Advisory
5	http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html
6	http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html
7	http://secunia.com/advisories/57836
8	http://secunia.com/advisories/57836
9	http://secunia.com/advisories/57966
10	http://secunia.com/advisories/57966
11	http://secunia.com/advisories/57968
12	http://secunia.com/advisories/57968
13	http://secunia.com/advisories/58615
14	http://secunia.com/advisories/58615
15	http://secunia.com/advisories/59458
16	http://secunia.com/advisories/59458
17	http://www.debian.org/security/2014/dsa-2902
18	http://www.debian.org/security/2014/dsa-2902
19	http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
20	http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
21	http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
22	http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
23	http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
24	http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
25	http://www.mandriva.com/security/advisories?name=MDVSA-2015:213
26	http://www.mandriva.com/security/advisories?name=MDVSA-2015:213
27	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
28	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
29	http://www.ubuntu.com/usn/USN-2167-1
30	http://www.ubuntu.com/usn/USN-2167-1
31	http://www-01.ibm.com/support/docview.wss?uid=swg21675820
32	http://www-01.ibm.com/support/docview.wss?uid=swg21675820
33	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862
34	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-310	暗号の問題	https://cwe.mitre.org/data/definitions/310.html

JVN Vulnerability Information

cURL および libcurl における任意の SSL サーバになりすまされる脆弱性

Title	cURL および libcurl における任意の SSL サーバになりすまされる脆弱性
Summary	cURL および libcurl は、OpenSSL、axTLS、QSOSSL または TLS の GSKit ライブラリを使用する場合、X.509 証明書のサブジェクトの Common Name (CN) フィールド内のワイルドカードの IP アドレスを認識するため、任意の SSL サーバになりすまされる脆弱性が存在します。
Possible impacts	中間者攻撃 (man-in-the-middle attack) により、巧妙に細工された正規の認証局より発行された証明書を介して、任意の SSL サーバになりすまされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 26, 2014, midnight
Registration Date	April 21, 2014, 2:09 p.m.
Last Update	July 29, 2015, 5:40 p.m.

Affected System

オラクル

Oracle Hyperion Essbase 11.1.2.2

Oracle Hyperion Essbase 11.1.2.3

IBM

IBM Advanced Settings Utility (ASU) 9.52 およびそれ以前

IBM Dynamic System Analysis (DSA) 9.52 およびそれ以前

IBM ToolsCenter Suite 9.52 およびそれ以前

IBM UpdateXpress System Packs Installer (UXSPI) 9.52 およびそれ以前

Haxx

cURL 7.1 以上 7.36.0 未満

libcurl 7.1 以上 7.36.0 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-0139	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
National Vulnerability Database (NVD)
2	CVE-2014-0139	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0139

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-310	https://jvndb.jvn.jp/ja/cwe/CWE-310.html

ベンダー情報

No	Name	URL
Chef
1	Chef Server 11.0.12 Release	http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/
2	Enterprise Chef 1.4.9 Release	http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/
3	Enterprise Chef 11.1.3 Release	http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
IBM Security Bulletin
4	MIGR-5095862	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862
Oracle Critical Patch Update
5	Oracle Critical Patch Update Advisory - July 2015	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
6	Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2015verbose-2367947.html
Security Advisory
7	libcurl IP address wildcard certificate validation	http://curl.haxx.se/docs/adv_20140326B.html
SECURITY BLOG
8	July 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2015_critical_patch_update

その他

No	Name	URL
関連文書
1	MGASA-2015-0165	http://advisories.mageia.org/MGASA-2015-0165.html

Change Log

No	Changed Details	Date of change
0	[2014年04月21日] 掲載 [2014年05月14日] ベンダ情報：Chef Software (Enterprise Chef 1.4.9 Release) を追加ベンダ情報：Chef Software (Enterprise Chef 11.1.3 Release) を追加ベンダ情報：Chef Software (Chef Server 11.0.12 Release) を追加 [2014年08月07日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：IBM (MIGR-5095862) を追加 [2015年06月26日] 参考情報：関連文書 (MGASA-2015-0165) を追加 [2015年07月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices) を追加ベンダ情報：オラクル (July 2015 Critical Patch Update Released) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:haxx:curl:7.21.3:::::::*
cpe:2.3:a:haxx:curl:7.15.1:::::::*
cpe:2.3:a:haxx:curl:7.24.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.6:::::::*
cpe:2.3:a:haxx:curl:7.16.1:::::::*
cpe:2.3:a:haxx:curl:7.13.0:::::::*
cpe:2.3:a:haxx:curl:7.35.0:::::::*
cpe:2.3:a:haxx:curl:7.18.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.2:::::::*
cpe:2.3:a:haxx:curl:7.14.1:::::::*
cpe:2.3:a:haxx:curl:7.21.5:::::::*
cpe:2.3:a:haxx:curl:7.21.1:::::::*
cpe:2.3:a:haxx:curl:7.12.1:::::::*
cpe:2.3:a:haxx:curl:7.32.0:::::::*
cpe:2.3:a:haxx:curl:7.16.2:::::::*
cpe:2.3:a:haxx:libcurl:7.11.2:::::::*
cpe:2.3:a:haxx:curl:7.17.1:::::::*
cpe:2.3:a:haxx:curl:7.19.1:::::::*
cpe:2.3:a:haxx:libcurl:7.17.1:::::::*
cpe:2.3:a:haxx:libcurl:7.19.4:::::::*
cpe:2.3:a:haxx:libcurl:7.30.0:::::::*
cpe:2.3:a:haxx:libcurl:7.25.0:::::::*
cpe:2.3:a:haxx:curl:7.12.2:::::::*
cpe:2.3:a:haxx:curl:7.15.2:::::::*
cpe:2.3:a:haxx:libcurl:7.12.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.3:::::::*
cpe:2.3:a:haxx:libcurl:7.16.4:::::::*
cpe:2.3:a:haxx:curl:7.19.6:::::::*
cpe:2.3:a:haxx:curl:7.29.0:::::::*
cpe:2.3:a:haxx:curl:7.15.0:::::::*
cpe:2.3:a:haxx:libcurl:7.12.3:::::::*
cpe:2.3:a:haxx:curl:7.22.0:::::::*
cpe:2.3:a:haxx:curl:7.33.0:::::::*
cpe:2.3:a:haxx:libcurl:7.33.0:::::::*
cpe:2.3:a:haxx:libcurl:7.18.0:::::::*
cpe:2.3:a:haxx:curl:7.16.0:::::::*
cpe:2.3:a:haxx:curl:7.10.6:::::::*
cpe:2.3:a:haxx:curl:7.13.1:::::::*
cpe:2.3:a:haxx:libcurl:7.23.0:::::::*
cpe:2.3:a:haxx:curl:7.10.8:::::::*
cpe:2.3:a:haxx:libcurl:7.19.1:::::::*
cpe:2.3:a:haxx:curl:7.20.0:::::::*
cpe:2.3:a:haxx:libcurl:7.26.0:::::::*
cpe:2.3:a:haxx:curl:7.20.1:::::::*
cpe:2.3:a:haxx:curl:7.26.0:::::::*
cpe:2.3:a:haxx:curl:7.19.7:::::::*
cpe:2.3:a:haxx:curl:7.19.3:::::::*
cpe:2.3:a:haxx:curl:7.23.1:::::::*
cpe:2.3:a:haxx:libcurl:7.15.2:::::::*
cpe:2.3:a:haxx:libcurl:7.16.0:::::::*
cpe:2.3:a:haxx:curl:7.25.0:::::::*
cpe:2.3:a:haxx:libcurl:7.16.2:::::::*
cpe:2.3:a:haxx:libcurl:7.34.0:::::::*
cpe:2.3:a:haxx:libcurl:7.31.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.5:::::::*
cpe:2.3:a:haxx:libcurl:7.35.0:::::::*
cpe:2.3:a:haxx:libcurl:7.22.0:::::::*
cpe:2.3:a:haxx:libcurl:7.20.0:::::::*
cpe:2.3:a:haxx:curl:7.19.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.0:::::::*
cpe:2.3:a:haxx:curl:7.12.0:::::::*
cpe:2.3:a:haxx:libcurl:7.14.1:::::::*
cpe:2.3:a:haxx:libcurl:7.28.0:::::::*
cpe:2.3:a:haxx:libcurl:7.11.1:::::::*
cpe:2.3:a:haxx:libcurl:7.18.2:::::::*
cpe:2.3:a:haxx:libcurl:7.13.0:::::::*
cpe:2.3:a:haxx:curl:7.21.6:::::::*
cpe:2.3:a:haxx:libcurl:7.21.5:::::::*
cpe:2.3:a:haxx:libcurl:7.15.1:::::::*
cpe:2.3:a:haxx:curl:7.30.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.3:::::::*
cpe:2.3:a:haxx:curl:7.27.0:::::::*
cpe:2.3:a:haxx:libcurl:7.17.0:::::::*
cpe:2.3:a:haxx:curl:7.17.0:::::::*
cpe:2.3:a:haxx:libcurl:7.24.0:::::::*
cpe:2.3:a:haxx:curl:7.12.3:::::::*
cpe:2.3:a:haxx:libcurl:7.13.1:::::::*
cpe:2.3:a:haxx:libcurl:7.10.8:::::::*
cpe:2.3:a:haxx:libcurl:7.27.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.3:::::::*
cpe:2.3:a:haxx:curl:7.14.0:::::::*
cpe:2.3:a:haxx:libcurl:7.19.7:::::::*
cpe:2.3:a:haxx:curl:7.19.4:::::::*
cpe:2.3:a:haxx:curl:7.15.3:::::::*
cpe:2.3:a:haxx:libcurl:7.12.1:::::::*
cpe:2.3:a:haxx:curl:7.15.5:::::::*
cpe:2.3:a:haxx:curl:7.21.2:::::::*
cpe:2.3:a:haxx:libcurl:7.10.6:::::::*
cpe:2.3:a:haxx:curl:7.31.0:::::::*
cpe:2.3:a:haxx:libcurl:7.23.1:::::::*
cpe:2.3:a:haxx:curl:7.11.2:::::::*
cpe:2.3:a:haxx:curl:7.16.4:::::::*
cpe:2.3:a:haxx:libcurl:7.21.6:::::::*
cpe:2.3:a:haxx:libcurl:7.19.5:::::::*
cpe:2.3:a:haxx:curl:7.10.7:::::::*
cpe:2.3:a:haxx:libcurl:7.14.0:::::::*
cpe:2.3:a:haxx:curl:7.34.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.7:::::::*
cpe:2.3:a:haxx:libcurl:7.21.1:::::::*
cpe:2.3:a:haxx:curl:7.21.0:::::::*
cpe:2.3:a:haxx:curl:7.13.2:::::::*
cpe:2.3:a:haxx:libcurl:7.16.3:::::::*
cpe:2.3:a:haxx:libcurl:7.13.2:::::::*
cpe:2.3:a:haxx:curl:7.28.0:::::::*
cpe:2.3:a:haxx:curl:7.11.1:::::::*
cpe:2.3:a:haxx:curl:7.23.0:::::::*
cpe:2.3:a:haxx:libcurl:7.15.4:::::::*
cpe:2.3:a:haxx:libcurl:7.20.1:::::::*
cpe:2.3:a:haxx:curl:7.28.1:::::::*
cpe:2.3:a:haxx:libcurl:7.11.0:::::::*
cpe:2.3:a:haxx:curl:7.18.1:::::::*
cpe:2.3:a:haxx:libcurl:7.16.1:::::::*
cpe:2.3:a:haxx:curl:7.18.2:::::::*
cpe:2.3:a:haxx:libcurl:7.32.0:::::::*
cpe:2.3:a:haxx:curl:7.21.4:::::::*
cpe:2.3:a:haxx:libcurl:7.29.0:::::::*
cpe:2.3:a:haxx:curl:7.19.2:::::::*
cpe:2.3:a:haxx:curl:7.16.3:::::::*
cpe:2.3:a:haxx:libcurl:7.18.1:::::::*
cpe:2.3:a:haxx:libcurl:7.10.7:::::::*
cpe:2.3:a:haxx:curl:7.21.7:::::::*
cpe:2.3:a:haxx:libcurl:7.28.1:::::::*
cpe:2.3:a:haxx:curl:7.15.4:::::::*
cpe:2.3:a:haxx:libcurl:7.12.2:::::::*
cpe:2.3:a:haxx:curl:7.19.5:::::::*
cpe:2.3:a:haxx:libcurl:7.15.0:::::::*
cpe:2.3:a:haxx:libcurl:7.21.4:::::::*
cpe:2.3:a:haxx:libcurl:7.19.2:::::::*
cpe:2.3:a:haxx:curl:7.11.0:::::::*