curl vulnerabilities (Debian)
224 vulnerabilities.
curlDebianA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumcurlDebianAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlDebianAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlDebianAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlDebianA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlDebianA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlDebianAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlDebianA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlDebianA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlDebianA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlDebianA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlDebiancurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...6.5 MediumcurlDebianIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlDebiancurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlDebianWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlDebianWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlDebianWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlDebianWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlDebiancurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlDebianA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlDebianUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 MediumcurlDebianlibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 MediumcurlDebianA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 HighcurlDebianlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlDebianlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlDebianThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighcurlDebianA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlDebianAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlDebianAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlDebianAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlDebianWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlDebianA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlDebianWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlDebianWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlDebianWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlDebianlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlDebiancurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlDebiancurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlDebiancurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlDebiancurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlDebiancurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlDebianA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlDebianDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlDebiancurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlDebiancurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlDebianHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlDebianDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlDebianAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 LowcurlDebianA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlDebianlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 Medium- Show moreLoading…