Every CVE Search/ Get API key

CVE-2013-1944

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...

5.0 MediumFix available

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Exploit likelihood

4.34%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
CVE-2013-1944
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
CVE-2013-1944
Updated
2026-11-02
EUVDEUVD-2013-1936 No score

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
EUVD-2013-1936
Updated
2026-11-03
GitHub AdvisoriesGHSA-q8gg-xjf7-2v3w No score

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
GHSA-q8gg-xjf7-2v3w
Weakness
CWE-200
Updated
2026-11-02
OSVCURL-CVE-2013-1944 No score

cookie domain tailmatch

libcurl is vulnerable to a cookie leak vulnerability when doing requests across domains with matching tails.

When communicating over HTTP(S) and having libcurl's cookie engine enabled, libcurl stores and holds cookies for use when subsequent requests are done to hosts and paths that match those kept cookies. Due to a bug in the tailmatching function, libcurl could wrongly send cookies meant for the domain 'ample.com' when communicating with 'example.com'.

This vulnerability can be used to hijack sessions in targeted attacks since registering domains using a known domain's name as an ending is trivial.

Both curl the command line tool and applications using the libcurl library are vulnerable.

Record
CURL-CVE-2013-1944
Updated
2026-11-02
OSV No score

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
CVE-2013-1944
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1944 No score

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.

Record
DEBIAN-CVE-2013-1944
Updated
2026-11-02
OSVopenSUSE-SU-2024:10303-1 No score

curl-7.51.0-1.1 on GA media

These are all security issues fixed in the curl-7.51.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10303-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
curl
Debian:12
 before 7.29.0-2.1
7.29.0-2.1
curl
Debian:13
 before 7.29.0-2.1
7.29.0-2.1
curl
Debian:14
 before 7.29.0-2.1
7.29.0-2.1
curl
Debian:6.0
 before 7.21.0-2.1+squeeze3, plus listed versions
7.21.0-17.21.0-27.21.0-2.1+squeeze17.21.0-2.1+squeeze2
7.21.0-2.1+squeeze3
curl
Red Hat:enterprise_linux:5::server
 before 0:7.15.5-16.el5_9
0:7.15.5-16.el5_9
curl-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:7.15.5-16.el5_9
0:7.15.5-16.el5_9
curl-devel
Red Hat:enterprise_linux:5::server
 before 0:7.15.5-16.el5_9
0:7.15.5-16.el5_9
curl
Red Hat:enterprise_linux:6::client
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl
Red Hat:enterprise_linux:6::client
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
Show 14 moreShow less
Affected packages
PackageAffectedFixed
libcurl-devel
Red Hat:enterprise_linux:6::client
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl
Red Hat:enterprise_linux:6::computenode
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl
Red Hat:enterprise_linux:6::computenode
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl-devel
Red Hat:enterprise_linux:6::computenode
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl
Red Hat:enterprise_linux:6::server
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl
Red Hat:enterprise_linux:6::server
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl-devel
Red Hat:enterprise_linux:6::server
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl
Red Hat:enterprise_linux:6::workstation
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl
Red Hat:enterprise_linux:6::workstation
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
libcurl-devel
Red Hat:enterprise_linux:6::workstation
 before 0:7.19.7-36.el6_4
0:7.19.7-36.el6_4
curl
openSUSE:Tumbleweed
From an advisory covering 32 CVEs
 before 7.51.0-1.1
7.51.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1944 is a medium vulnerability (CVSS 5.0) in Haxx Curl, published April 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. Fixed in curl 7.29.0-2.1.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open