curl vulnerabilities (Alpine)
196 vulnerabilities.
curlAlpineHTTP/2 stream-dependency tree UAF9.8 CriticalcurlAlpineOCSP stapling bypass with Apple SecTrust5.3 MediumcurlAlpinenetrc credential leak with reused proxy connection5.3 MediumcurlAlpinestale custom cookie host causes cookie leak7.5 HighcurlAlpineproxy credentials leak over redirect-to proxy5.9 MediumcurlAlpinewrong reuse of SMB connection7.5 HighcurlAlpinewrong reuse of HTTP Negotiate connection6.5 MediumcurlAlpineconnection reuse ignores TLS requirement5.9 MediumcurlAlpinecross-proxy Digest auth state leak5.3 MediumcurlAlpineuse after free in SMB connection reuse7.5 HighcurlAlpinewrong proxy connection reuse with credentials6.5 MediumcurlAlpinetoken leak with redirect and netrc5.3 MediumcurlAlpinebad reuse of HTTP Negotiate connection6.5 MediumcurlAlpinebroken TLS options for threaded LDAPS6.3 MediumcurlAlpineOpenSSL partial chain store policy bypass5.3 MediumcurlAlpinebearer token leak on cross-protocol redirect5.3 MediumcurlAlpineNo QUIC certificate pinning with GnuTLS5.9 MediumcurlAlpinemissing SFTP host verification with wolfSSH4.3 MediumcurlAlpinepredictable WebSocket mask5.3 MediumcurlAlpineOut of bounds read for cookie path7.5 HighcurlAlpineWebSocket endless loop7.5 HighcurlAlpineNo QUIC certificate pinning with wolfSSL4.8 MediumcurlAlpineQUIC certificate check skip with wolfSSL6.5 MediumcurlAlpinegzip integer overflow7.3 HighcurlAlpineeventfd double close7.0 HighcurlAlpinenetrc and default credential leak3.4 LowcurlAlpinenetrc and redirect credential leak3.4 LowcurlAlpineHSTS subdomain overwrites parent cache entry6.5 MediumcurlAlpineOCSP stapling bypass with GnuTLS6.5 MediumcurlAlpineASN.1 date parser overread6.5 MediumcurlAlpinemacidn punycode buffer overread4.3 MediumcurlAlpinefreeing stack buffer in utf8asn1str7.5 HighcurlAlpineTLS certificate check bypass with mbedTLS6.5 MediumcurlAlpineQUIC certificate check bypass with wolfSSL6.3 MediumcurlAlpineHTTP/2 push headers memory-leak8.6 HighcurlAlpineUsage of disabled protocol3.5 LowcurlAlpineOCSP verification bypass with TLS session reuse5.3 MediumcurlAlpineWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlAlpineThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlAlpineThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlAlpineThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlAlpineWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlAlpineA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlAlpineAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlAlpineAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlAlpineA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighcurlAlpineA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumcurlAlpineAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlAlpineAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlAlpineAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Medium- Show moreLoading…