curl vulnerabilities (Azure Linux)
99 vulnerabilities.
-
curlAzure Linux wolfSSL public-key pinning bypass 9.1 Critical -
curlAzure Linux password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
curlAzure Linux curl_mime_free stack overflow by recursion 7.5 High -
curlAzure Linux -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
curlAzure Linux TFTP direction confusion 8.1 High -
curlAzure Linux FTP wildcard write callback mixup 9.1 Critical -
curlAzure Linux never-ending loop via server response omission 8.1 High -
curlAzure Linux server-set cookie aborts cookie jar load 8.1 High -
curlAzure Linux knownhost callback mismatches key as missing 7.4 High -
curlAzure Linux IMAP APPEND plus CRLF conversion command injection 8.1 High -
curlAzure Linux HSTS response erases persisted entries 8.1 High -
curlAzure Linux HSTS cache import drops longer-lived child 8.1 High -
curlAzure Linux leaking host credentials to HTTP proxy 9.1 Critical -
curlAzure Linux redirect to SFTP or SCP bypasses host verification 8.1 High -
curlAzure Linux stale SigV4 headers sent unintended 8.1 High -
curlAzure Linux local interface connection reuse mixup 8.1 High -
curlAzure Linux info leak uploading over WebSockets with GnuTLS 8.1 High -
curlAzure Linux domain-scoped PSL domain cookie 8.2 High -
curlAzure Linux OpenSSL pinning bypass 7.5 High -
curlAzure Linux Negotiate ambient user conn reuse 9.8 Critical -
curlAzure Linux HTTP/2 server push UAF 9.1 Critical -
curlAzure Linux OpenLDAP SASL authentication bypass 7.4 High -
curlAzure Linux wolfSSL CA-cache hit overrides callback 7.5 High -
curlAzure Linux native CA store conn reuse 7.5 High -
curlAzure Linux stale proxy password leak 9.8 Critical -
curlAzure Linux incomplete mTLS config matching in conn reuse 7.5 High -
curlAzure Linux env-set cross-proxy Digest auth state leak 9.1 Critical -
curlAzure Linux password leak with netrc and user in URL 9.1 Critical -
curlAzure Linux wrong reuse for different services 6.5 Medium -
curlAzure Linux wrong STARTTLS connection reuse 8.1 High -
curlAzure Linux proto-default skips SSH verification 7.5 High -
curlAzure Linux cross-origin Digest auth state leak 9.8 Critical -
curlAzure Linux HTTP/2 stream-dependency tree UAF 9.8 Critical -
curlAzure Linux netrc credential leak with reused proxy connection 5.3 Medium -
curlAzure Linux stale custom cookie host causes cookie leak 7.5 High -
curlAzure Linux proxy credentials leak over redirect-to proxy 5.9 Medium -
curlAzure Linux wrong reuse of HTTP Negotiate connection 6.5 Medium -
curlAzure Linux connection reuse ignores TLS requirement 5.9 Medium -
curlAzure Linux cross-proxy Digest auth state leak 5.3 Medium -
curlAzure Linux wrong proxy connection reuse with credentials 6.5 Medium -
curlAzure Linux token leak with redirect and netrc 5.3 Medium -
curlAzure Linux bad reuse of HTTP Negotiate connection 6.5 Medium -
curlAzure Linux broken TLS options for threaded LDAPS 6.3 Medium -
curlAzure Linux predictable WebSocket mask 5.3 Medium -
curlAzure Linux gzip integer overflow 7.3 High -
curlAzure Linux eventfd double close 7.0 High -
curlAzure Linux netrc and default credential leak 3.4 Low -
curlAzure Linux netrc and redirect credential leak 3.4 Low -
curlAzure Linux HSTS subdomain overwrites parent cache entry 6.5 Medium -
curlAzure Linux OCSP stapling bypass with GnuTLS 6.5 Medium - Show olderLoading…