Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2016-4606: Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypas...
CVE-2016-4606 · published 6 years ago
Summary
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
What to do
- Update haxx curl to version 7.49.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| haxx | curl |
< 7.49.1 cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* |
Original advisory text
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypas...
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
References
- http://www.securityfocus.com/bid/93055 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1036858 Third Party Advisory VDB Entry
- https://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html Mailing List Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published21 Feb 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-4606 · NVD
Track software like this
Free during beta