curl vulnerabilities (Alpine)
196 vulnerabilities.
curlAlpinelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlAlpineCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlAlpineA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...4.3 MediumcurlAlpineCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 MediumcurlAlpinedotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and...6.1 MediumcurlAlpinecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlAlpineCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlAlpinecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlAlpinecurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 CriticalcurlAlpineA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlAlpineA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlAlpinecurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlAlpinelibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 CriticalcurlAlpinecurl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ...9.8 CriticalcurlAlpineThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlAlpineThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlAlpineAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlAlpinelibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlAlpinecurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlAlpineWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlAlpineWhen asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data...6.5 MediumcurlAlpineIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session...4.8 MediumcurlAlpineThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 LowcurlAlpinecurl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks...4.3 MediumcurlAlpinecurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...6.5 MediumcurlAlpineThe verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when...9.8 CriticalcurlAlpineThe verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when...8.1 HighcurlAlpinecurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlAlpinecurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 MediumcurlAlpinecurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlAlpineA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 LowcurlAlpineThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlAlpineThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlAlpineThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlAlpineThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlAlpineThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlAlpineThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlAlpineA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlAlpineA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlAlpineMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlAlpinecurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighcurlAlpineUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 HighcurlAlpinecurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlAlpinecurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlAlpinecURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 MediumcurlAlpineThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 Medium