CVE-2018-1000007 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-1000007 Interim 1 48 2023-06-13T00:38:04Z current 2021-05-30T14:20:11Z 2023-06-13T00:38:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-1000007 libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-January/006341.html E-Mail link for SUSE-CU-2019:695-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006379.html E-Mail link for SUSE-CU-2019:706-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006369.html E-Mail link for SUSE-CU-2019:708-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006364.html E-Mail link for SUSE-CU-2019:710-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006372.html E-Mail link for SUSE-CU-2019:712-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006376.html E-Mail link for SUSE-CU-2019:714-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006361.html E-Mail link for SUSE-CU-2019:716-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006360.html E-Mail link for SUSE-CU-2019:719-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006373.html E-Mail link for SUSE-CU-2019:721-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html E-Mail link for SUSE-CU-2019:723-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006366.html E-Mail link for SUSE-CU-2019:725-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006378.html E-Mail link for SUSE-CU-2019:727-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006367.html E-Mail link for SUSE-CU-2019:729-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006368.html E-Mail link for SUSE-CU-2019:731-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006370.html E-Mail link for SUSE-CU-2019:733-1 https://lists.suse.com/pipermail/sle-security-updates/2020-January/006365.html E-Mail link for SUSE-CU-2019:738-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003630.html E-Mail link for SUSE-SU-2018:0214-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003632.html E-Mail link for SUSE-SU-2018:0217-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003634.html E-Mail link for SUSE-SU-2018:0230-1 https://lists.opensuse.org/opensuse-updates/2018-01/msg00101.html E-Mail link for openSUSE-SU-2018:0236-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container caasp/v4/default-http-backend:beta1 Container caasp/v4/dnsmasq-nanny:2.78 Container caasp/v4/flannel:0.9.1 Container caasp/v4/haproxy:beta1 Container caasp/v4/kubedns:beta1 Container caasp/v4/nginx-ingress-controller:beta1 Container caasp/v4/openldap:beta1 Container caasp/v4/pause:1.0.0 Container caasp/v4/pv-recycler-node:8.25 Container caasp/v4/salt-api:beta1 Container caasp/v4/salt-master:beta1 Container caasp/v4/salt-minion:beta1 Container caasp/v4/sidecar:beta1 Container caasp/v4/velum:4.0.0 Container suse/sles12sp3:12.16 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 SUSE Studio Onsite 1.3 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 curl curl-7.19.7-1.70.13.1 curl-7.37.0-37.14.1 curl-7.59.0-lp150.1.1 curl-7.60.0-1.1 curl-7.60.0-2.11 curl-7.60.0-3.17.1 curl-7.60.0-9.8 curl-7.66.0-2.59 curl-7.66.0-4.11.1 curl-7.66.0-4.14.1 curl-7.66.0-4.22.1 curl-7.66.0-4.27.1 curl-7.66.0-lp152.2.7 curl-7.79.1-150400.3.1 curl-7.79.1-150400.5.15.1 curl-7.79.1-150400.5.6.1 curl-8.0.1-150400.5.23.1 curl-openssl1-7.19.7-1.70.13.1 libcurl-devel libcurl-devel-7.19.7-1.20.53.13.1 libcurl-devel-7.19.7-1.70.13.1 libcurl-devel-7.37.0-37.14.1 libcurl-devel-7.60.0-1.1 libcurl-devel-7.60.0-2.11 libcurl-devel-7.60.0-3.17.1 libcurl-devel-7.60.0-9.8 libcurl-devel-7.66.0-2.59 libcurl-devel-7.66.0-4.14.1 libcurl-devel-7.79.1-150400.3.1 libcurl-devel-8.0.1-150400.5.23.1 libcurl4 libcurl4-32bit libcurl4-32bit-7.19.7-1.70.13.1 libcurl4-32bit-7.37.0-37.14.1 libcurl4-32bit-7.59.0-lp150.1.1 libcurl4-32bit-7.60.0-1.1 libcurl4-32bit-7.60.0-2.11 libcurl4-32bit-7.60.0-3.17.1 libcurl4-32bit-7.60.0-9.8 libcurl4-32bit-7.66.0-2.59 libcurl4-32bit-7.66.0-4.14.1 libcurl4-32bit-7.66.0-lp152.2.6 libcurl4-32bit-7.79.1-150400.3.1 libcurl4-32bit-8.0.1-150400.5.23.1 libcurl4-7.19.7-1.70.13.1 libcurl4-7.37.0-37.14.1 libcurl4-7.59.0-lp150.1.1 libcurl4-7.60.0-1.1 libcurl4-7.60.0-2.11 libcurl4-7.60.0-3.17.1 libcurl4-7.60.0-9.8 libcurl4-7.66.0-2.59 libcurl4-7.66.0-4.11.1 libcurl4-7.66.0-4.14.1 libcurl4-7.66.0-4.22.1 libcurl4-7.66.0-4.27.1 libcurl4-7.66.0-lp152.2.7 libcurl4-7.79.1-150400.3.1 libcurl4-7.79.1-150400.5.15.1 libcurl4-7.79.1-150400.5.6.1 libcurl4-8.0.1-150400.5.23.1 libcurl4-openssl1-32bit-7.19.7-1.70.13.1 libcurl4-openssl1-7.19.7-1.70.13.1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/default-http-backend:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/dnsmasq-nanny:2.78 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/flannel:0.9.1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/haproxy:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/kubedns:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/openldap:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/pause:1.0.0 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/pv-recycler-node:8.25 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/salt-api:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/salt-master:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/salt-minion:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/sidecar:beta1 libcurl4-7.37.0-37.14.1 as a component of Container caasp/v4/velum:4.0.0 libcurl4-7.37.0-37.14.1 as a component of Container suse/sles12sp3:12.16 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 curl-7.60.0-2.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcurl4-7.60.0-2.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcurl4-32bit-7.60.0-2.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 curl-7.60.0-9.8 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libcurl4-7.60.0-9.8 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libcurl4-32bit-7.60.0-9.8 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 curl-7.66.0-4.11.1 as a component of SUSE Linux Enterprise Micro 5.0 libcurl4-7.66.0-4.11.1 as a component of SUSE Linux Enterprise Micro 5.0 curl-7.66.0-4.22.1 as a component of SUSE Linux Enterprise Micro 5.1 libcurl4-7.66.0-4.22.1 as a component of SUSE Linux Enterprise Micro 5.1 curl-7.66.0-4.27.1 as a component of SUSE Linux Enterprise Micro 5.2 libcurl4-7.66.0-4.27.1 as a component of SUSE Linux Enterprise Micro 5.2 curl-7.79.1-150400.5.6.1 as a component of SUSE Linux Enterprise Micro 5.3 libcurl4-7.79.1-150400.5.6.1 as a component of SUSE Linux Enterprise Micro 5.3 curl-7.79.1-150400.5.15.1 as a component of SUSE Linux Enterprise Micro 5.4 libcurl4-7.79.1-150400.5.15.1 as a component of SUSE Linux Enterprise Micro 5.4 curl-7.60.0-1.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libcurl-devel-7.60.0-1.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libcurl4-7.60.0-1.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libcurl4-32bit-7.60.0-1.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 curl-7.60.0-3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcurl-devel-7.60.0-3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcurl4-7.60.0-3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libcurl4-32bit-7.60.0-3.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 curl-7.66.0-2.59 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcurl-devel-7.66.0-2.59 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcurl4-7.66.0-2.59 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libcurl4-32bit-7.66.0-2.59 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 curl-7.66.0-4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl-devel-7.66.0-4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl4-7.66.0-4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcurl4-32bit-7.66.0-4.14.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 curl-7.79.1-150400.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl-devel-7.79.1-150400.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl4-7.79.1-150400.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl4-32bit-7.79.1-150400.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 curl-8.0.1-150400.5.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl-devel-8.0.1-150400.5.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl4-8.0.1-150400.5.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl4-32bit-8.0.1-150400.5.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 curl-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA curl-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libcurl4-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libcurl4-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libcurl4-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libcurl4-openssl1-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA curl-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA curl-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libcurl4-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libcurl4-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libcurl4-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libcurl4-openssl1-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA curl-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 libcurl4-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 libcurl4-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 curl-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11-SECURITY libcurl4-openssl1-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11-SECURITY libcurl4-openssl1-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server 11-SECURITY curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP2 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP2 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP2 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP3 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP3 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server 12 SP3 curl-7.60.0-2.11 as a component of SUSE Linux Enterprise Server 12 SP4 libcurl4-7.60.0-2.11 as a component of SUSE Linux Enterprise Server 12 SP4 libcurl4-32bit-7.60.0-2.11 as a component of SUSE Linux Enterprise Server 12 SP4 curl-7.60.0-9.8 as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4-7.60.0-9.8 as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4-32bit-7.60.0-9.8 as a component of SUSE Linux Enterprise Server 12 SP5 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 curl-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl4-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libcurl4-32bit-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 curl-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcurl4-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcurl4-32bit-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libcurl-devel-7.19.7-1.70.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libcurl-devel-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libcurl-devel-7.37.0-37.14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libcurl-devel-7.60.0-2.11 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libcurl-devel-7.60.0-9.8 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libcurl-devel-7.19.7-1.20.53.13.1 as a component of SUSE Studio Onsite 1.3 curl-7.59.0-lp150.1.1 as a component of openSUSE Leap 15.0 libcurl4-7.59.0-lp150.1.1 as a component of openSUSE Leap 15.0 libcurl4-32bit-7.59.0-lp150.1.1 as a component of openSUSE Leap 15.0 curl-7.66.0-lp152.2.7 as a component of openSUSE Leap 15.2 libcurl4-7.66.0-lp152.2.7 as a component of openSUSE Leap 15.2 libcurl4-32bit-7.66.0-lp152.2.6 as a component of openSUSE Leap 15.2 curl-7.66.0-4.14.1 as a component of openSUSE Leap 15.3 libcurl4-7.66.0-4.14.1 as a component of openSUSE Leap 15.3 libcurl4-32bit-7.66.0-4.14.1 as a component of openSUSE Leap 15.3 curl-7.79.1-150400.3.1 as a component of openSUSE Leap 15.4 libcurl4-7.79.1-150400.3.1 as a component of openSUSE Leap 15.4 libcurl4-32bit-7.79.1-150400.3.1 as a component of openSUSE Leap 15.4 curl as a component of SUSE CaaS Platform 4.0 libcurl-devel as a component of SUSE CaaS Platform 4.0 libcurl4 as a component of SUSE CaaS Platform 4.0 libcurl4-32bit as a component of SUSE CaaS Platform 4.0 curl as a component of SUSE Enterprise Storage 6 curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS curl as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS curl as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS curl as a component of SUSE Linux Enterprise Server 15-ESPOS curl as a component of SUSE Linux Enterprise Server 15-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15-LTSS curl as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 curl as a component of SUSE Manager Proxy 4.0 curl as a component of SUSE Manager Retail Branch Server 4.0 curl as a component of SUSE Manager Server 4.0 curl as a component of SUSE OpenStack Cloud 9 libcurl4 as a component of SUSE OpenStack Cloud 9 libcurl4-32bit as a component of SUSE OpenStack Cloud 9 curl as a component of SUSE OpenStack Cloud Crowbar 9 libcurl4 as a component of SUSE OpenStack Cloud Crowbar 9 libcurl4-32bit as a component of SUSE OpenStack Cloud Crowbar 9 libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request. CVE-2018-1000007 Container caasp/v4/default-http-backend:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/dnsmasq-nanny:2.78:libcurl4-7.37.0-37.14.1 Container caasp/v4/flannel:0.9.1:libcurl4-7.37.0-37.14.1 Container caasp/v4/haproxy:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/kubedns:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/nginx-ingress-controller:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/openldap:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/pause:1.0.0:libcurl4-7.37.0-37.14.1 Container caasp/v4/pv-recycler-node:8.25:libcurl4-7.37.0-37.14.1 Container caasp/v4/salt-api:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/salt-master:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/salt-minion:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/sidecar:beta1:libcurl4-7.37.0-37.14.1 Container caasp/v4/velum:4.0.0:libcurl4-7.37.0-37.14.1 Container suse/sles12sp3:12.16:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP2:curl-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP2:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP2:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP3:curl-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP3:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP3:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Desktop 12 SP4:curl-7.60.0-2.11 SUSE Linux Enterprise Desktop 12 SP4:libcurl4-7.60.0-2.11 SUSE Linux Enterprise Desktop 12 SP4:libcurl4-32bit-7.60.0-2.11 SUSE Linux Enterprise High Performance Computing 12 SP5:curl-7.60.0-9.8 SUSE Linux Enterprise High Performance Computing 12 SP5:libcurl4-7.60.0-9.8 SUSE Linux Enterprise High Performance Computing 12 SP5:libcurl4-32bit-7.60.0-9.8 SUSE Linux Enterprise Micro 5.0:curl-7.66.0-4.11.1 SUSE Linux Enterprise Micro 5.0:libcurl4-7.66.0-4.11.1 SUSE Linux Enterprise Micro 5.1:curl-7.66.0-4.22.1 SUSE Linux Enterprise Micro 5.1:libcurl4-7.66.0-4.22.1 SUSE Linux Enterprise Micro 5.2:curl-7.66.0-4.27.1 SUSE Linux Enterprise Micro 5.2:libcurl4-7.66.0-4.27.1 SUSE Linux Enterprise Micro 5.3:curl-7.79.1-150400.5.6.1 SUSE Linux Enterprise Micro 5.3:libcurl4-7.79.1-150400.5.6.1 SUSE Linux Enterprise Micro 5.4:curl-7.79.1-150400.5.15.1 SUSE Linux Enterprise Micro 5.4:libcurl4-7.79.1-150400.5.15.1 SUSE Linux Enterprise Module for Basesystem 15:curl-7.60.0-1.1 SUSE Linux Enterprise Module for Basesystem 15:libcurl-devel-7.60.0-1.1 SUSE Linux Enterprise Module for Basesystem 15:libcurl4-7.60.0-1.1 SUSE Linux Enterprise Module for Basesystem 15:libcurl4-32bit-7.60.0-1.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:curl-7.60.0-3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcurl-devel-7.60.0-3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcurl4-7.60.0-3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libcurl4-32bit-7.60.0-3.17.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:curl-7.66.0-2.59 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcurl-devel-7.66.0-2.59 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcurl4-7.66.0-2.59 SUSE Linux Enterprise Module for Basesystem 15 SP2:libcurl4-32bit-7.66.0-2.59 SUSE Linux Enterprise Module for Basesystem 15 SP3:curl-7.66.0-4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl-devel-7.66.0-4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl4-7.66.0-4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcurl4-32bit-7.66.0-4.14.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:curl-7.79.1-150400.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl-devel-7.79.1-150400.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl4-7.79.1-150400.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl4-32bit-7.79.1-150400.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:curl-8.0.1-150400.5.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl-devel-8.0.1-150400.5.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl4-8.0.1-150400.5.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl4-32bit-8.0.1-150400.5.23.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:curl-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:curl-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libcurl4-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libcurl4-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libcurl4-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libcurl4-openssl1-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:curl-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libcurl4-openssl1-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP4:curl-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11 SP4:libcurl4-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11-SECURITY:curl-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 11-SECURITY:libcurl4-openssl1-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server 12 SP2:curl-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP2:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP2:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP3:curl-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP3:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP3:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Server 12 SP4:curl-7.60.0-2.11 SUSE Linux Enterprise Server 12 SP4:libcurl4-7.60.0-2.11 SUSE Linux Enterprise Server 12 SP4:libcurl4-32bit-7.60.0-2.11 SUSE Linux Enterprise Server 12 SP5:curl-7.60.0-9.8 SUSE Linux Enterprise Server 12 SP5:libcurl4-7.60.0-9.8 SUSE Linux Enterprise Server 12 SP5:libcurl4-32bit-7.60.0-9.8 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:curl-7.37.0-37.14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:curl-7.19.7-1.70.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-7.19.7-1.70.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcurl4-32bit-7.19.7-1.70.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:curl-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:curl-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libcurl4-7.37.0-37.14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libcurl4-32bit-7.37.0-37.14.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libcurl-devel-7.19.7-1.70.13.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libcurl-devel-7.37.0-37.14.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libcurl-devel-7.37.0-37.14.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libcurl-devel-7.60.0-2.11 SUSE Linux Enterprise Software Development Kit 12 SP5:libcurl-devel-7.60.0-9.8 SUSE Studio Onsite 1.3:libcurl-devel-7.19.7-1.20.53.13.1 openSUSE Leap 15.0:curl-7.59.0-lp150.1.1 openSUSE Leap 15.0:libcurl4-7.59.0-lp150.1.1 openSUSE Leap 15.0:libcurl4-32bit-7.59.0-lp150.1.1 openSUSE Leap 15.2:curl-7.66.0-lp152.2.7 openSUSE Leap 15.2:libcurl4-7.66.0-lp152.2.7 openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.2.6 openSUSE Leap 15.3:curl-7.66.0-4.14.1 openSUSE Leap 15.3:libcurl4-7.66.0-4.14.1 openSUSE Leap 15.3:libcurl4-32bit-7.66.0-4.14.1 openSUSE Leap 15.4:curl-7.79.1-150400.3.1 openSUSE Leap 15.4:libcurl4-7.79.1-150400.3.1 openSUSE Leap 15.4:libcurl4-32bit-7.79.1-150400.3.1 SUSE CaaS Platform 4.0:curl SUSE CaaS Platform 4.0:libcurl-devel SUSE CaaS Platform 4.0:libcurl4 SUSE CaaS Platform 4.0:libcurl4-32bit SUSE Enterprise Storage 6:curl SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15-LTSS:curl SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:curl SUSE Linux Enterprise Server 12 SP4-ESPOS:libcurl4 SUSE Linux Enterprise Server 12 SP4-ESPOS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:curl SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:curl SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15-ESPOS:curl SUSE Linux Enterprise Server 15-LTSS:curl SUSE Linux Enterprise Server 15-LTSS:libcurl-devel SUSE Linux Enterprise Server 15-LTSS:libcurl4 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit SUSE Linux Enterprise Server Business Critical Linux 15 SP1:curl SUSE Linux Enterprise Server for SAP Applications 12 SP4:curl SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcurl4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15:curl SUSE Linux Enterprise Server for SAP Applications 15:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15:libcurl4-32bit SUSE Manager Proxy 4.0:curl SUSE Manager Retail Branch Server 4.0:curl SUSE Manager Server 4.0:curl SUSE OpenStack Cloud 9:curl SUSE OpenStack Cloud 9:libcurl4 SUSE OpenStack Cloud 9:libcurl4-32bit SUSE OpenStack Cloud Crowbar 9:curl SUSE OpenStack Cloud Crowbar 9:libcurl4 SUSE OpenStack Cloud Crowbar 9:libcurl4-32bit moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N