curl vulnerabilities (Alpine)
196 vulnerabilities.
curlAlpineA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlAlpineA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlAlpineAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlAlpineA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlAlpineA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlAlpineA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlAlpineA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlAlpinecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...6.5 MediumcurlAlpineIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlAlpinecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlAlpineWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlAlpineWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlAlpineWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlAlpineWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlAlpinecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlAlpineA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlAlpineUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 MediumcurlAlpinelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 MediumcurlAlpineA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 HighcurlAlpinelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlAlpinelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlAlpineThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighcurlAlpineA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlAlpineAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlAlpineAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlAlpineAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlAlpineWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlAlpineA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlAlpineWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlAlpinelibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 HighcurlAlpineWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlAlpineWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlAlpinecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlAlpinelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlAlpinecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 HighcurlAlpinecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlAlpinecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlAlpinecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlAlpinecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlAlpinecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlAlpineA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlAlpineDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlAlpinecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlAlpinecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlAlpineHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlAlpineDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlAlpineAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 LowcurlAlpineA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlAlpinelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 MediumcurlAlpinelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 High- Show moreLoading…