curl vulnerabilities (Debian)
224 vulnerabilities.
curlDebiannetrc credential leak with reused proxy connection5.3 MediumcurlDebianstale custom cookie host causes cookie leak7.5 HighcurlDebianproxy credentials leak over redirect-to proxy5.9 MediumcurlDebianwrong reuse of SMB connection7.5 HighcurlDebianwrong reuse of HTTP Negotiate connection6.5 MediumcurlDebianconnection reuse ignores TLS requirement5.9 MediumcurlDebiancross-proxy Digest auth state leak5.3 MediumcurlDebianuse after free in SMB connection reuse7.5 HighcurlDebianwrong proxy connection reuse with credentials6.5 MediumcurlDebiantoken leak with redirect and netrc5.3 MediumcurlDebianbad reuse of HTTP Negotiate connection6.5 MediumcurlDebianbroken TLS options for threaded LDAPS6.3 MediumcurlDebianlibssh key passphrase bypass without agent set3.1 LowcurlDebianlibssh global known_hosts override5.3 MediumcurlDebianOpenSSL partial chain store policy bypass5.3 MediumcurlDebianbearer token leak on cross-protocol redirect5.3 MediumcurlDebianNo QUIC certificate pinning with GnuTLS5.9 MediumcurlDebianwcurl path traversal with percent-encoded slashes4.6 MediumcurlDebianmissing SFTP host verification with wolfSSH4.3 MediumcurlDebianpredictable WebSocket mask5.3 MediumcurlDebianOut of bounds read for cookie path7.5 HighcurlDebiancurl - regression updateNo scorecurlDebianWebSocket endless loop7.5 HighcurlDebianNo QUIC certificate pinning with wolfSSL4.8 MediumcurlDebianQUIC certificate check skip with wolfSSL6.5 MediumcurlDebiangzip integer overflow7.3 HighcurlDebianeventfd double close7.0 HighcurlDebiannetrc and default credential leak3.4 LowcurlDebiannetrc and redirect credential leak3.4 LowcurlDebianHSTS subdomain overwrites parent cache entry6.5 MediumcurlDebianOCSP stapling bypass with GnuTLS6.5 MediumcurlDebianASN.1 date parser overread6.5 MediumcurlDebianmacidn punycode buffer overread4.3 MediumcurlDebianfreeing stack buffer in utf8asn1str7.5 HighcurlDebianTLS certificate check bypass with mbedTLS6.5 MediumcurlDebianQUIC certificate check bypass with wolfSSL6.3 MediumcurlDebianHTTP/2 push headers memory-leak8.6 HighcurlDebianUsage of disabled protocol3.5 LowcurlDebianOCSP verification bypass with TLS session reuse5.3 MediumcurlDebianWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlDebianThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlDebianThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlDebianThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlDebianWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlDebianInteger overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry...3.3 LowcurlDebiancurl - security updateNo scorecurlDebianA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlDebianAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlDebianAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlDebianA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 High- Show moreLoading…