DEBIAN-CVE-2011-2192

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2011-2192
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-2192.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2011-2192
Upstream
Downstream
Published
2011-07-07T21:55:02Z
Modified
2026-09-01T20:03:08Z
Summary
[none]
Details

The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.

References

Affected packages

Debian:12 / curl

Package

Name
curl
Purl
pkg:deb/debian/curl?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.21.6-2

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-2192.json"

Debian:13 / curl

Package

Name
curl
Purl
pkg:deb/debian/curl?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.21.6-2

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-2192.json"

Debian:14 / curl

Package

Name
curl
Purl
pkg:deb/debian/curl?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.21.6-2

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2011-2192.json"