curl vulnerabilities (Debian)
224 vulnerabilities.
curlDebianlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighcurlDebianlibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlDebianCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlDebianA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...4.3 MediumcurlDebianCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 MediumcurlDebiancurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlDebianCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlDebiancurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlDebiancurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 CriticalcurlDebianA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlDebianA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlDebiancurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlDebianlibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 CriticalcurlDebianlibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 CriticalcurlDebiancurl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ...9.8 CriticalcurlDebianThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlDebianThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlDebianAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlDebianlibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlDebiancurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlDebianWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlDebianIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session...4.8 MediumcurlDebianThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 LowcurlDebiancurl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks...4.3 MediumcurlDebiancurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlDebiancurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 MediumcurlDebiancurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlDebianA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 LowcurlDebianThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlDebianThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlDebianThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlDebianThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlDebianThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlDebianThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlDebianA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlDebianA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlDebianMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlDebiancurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighcurlDebianUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 HighcurlDebiancurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlDebiancurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlDebianThe (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function...5.3 MediumcurlDebianThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 HighcurlDebianThe smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB...6.4 MediumcurlDebiancURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a...5.0 MediumcurlDebianThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...7.5 HighcurlDebianThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...9.0 HighcurlDebianCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumcurlDebianThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 MediumcurlDebiancURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set...5.0 Medium- Show moreLoading…