curl vulnerabilities (Azure Linux)
99 vulnerabilities.
curlAzure Linuxmacidn punycode buffer overread4.3 MediumcurlAzure Linuxfreeing stack buffer in utf8asn1str7.5 HighcurlAzure LinuxTLS certificate check bypass with mbedTLS6.5 MediumcurlAzure LinuxHTTP/2 push headers memory-leak8.6 HighcurlAzure LinuxUsage of disabled protocol3.5 LowcurlAzure LinuxOCSP verification bypass with TLS session reuse5.3 MediumcurlAzure LinuxWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlAzure LinuxThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlAzure LinuxThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlAzure LinuxThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlAzure LinuxWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlAzure LinuxA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlAzure LinuxAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlAzure LinuxAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlAzure LinuxA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighcurlAzure LinuxAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlAzure LinuxAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlAzure LinuxAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlAzure LinuxA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlAzure LinuxA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlAzure LinuxAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlAzure LinuxA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlAzure LinuxA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlAzure LinuxA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlAzure LinuxA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlAzure LinuxIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlAzure Linuxcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlAzure LinuxWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlAzure LinuxWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlAzure LinuxWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlAzure Linuxcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlAzure LinuxA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlAzure LinuxUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 MediumcurlAzure Linuxlibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 MediumcurlAzure LinuxA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 HighcurlAzure Linuxlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlAzure Linuxlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlAzure LinuxThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighcurlAzure LinuxWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlAzure LinuxA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlAzure LinuxWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlAzure Linuxlibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 HighcurlAzure LinuxWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlAzure LinuxWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlAzure Linuxcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlAzure Linuxlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlAzure Linuxcurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...5.3 MediumcurlAzure Linuxcurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 HighcurlAzure Linuxcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 Low