LibCURL_jll vulnerabilities (Julia)
111 vulnerabilities.
LibCURL_jllJuliamacidn punycode buffer overread4.3 MediumLibCURL_jllJuliafreeing stack buffer in utf8asn1str7.5 HighLibCURL_jllJuliaTLS certificate check bypass with mbedTLS6.5 MediumLibCURL_jllJuliaQUIC certificate check bypass with wolfSSL6.3 MediumLibCURL_jllJuliaHTTP/2 push headers memory-leak8.6 HighLibCURL_jllJuliaUsage of disabled protocol3.5 LowLibCURL_jllJuliaOCSP verification bypass with TLS session reuse5.3 MediumLibCURL_jllJuliaWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumLibCURL_jllJuliaThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumLibCURL_jllJuliaThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowLibCURL_jllJuliaThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalLibCURL_jllJuliaWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighLibCURL_jllJuliaA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumLibCURL_jllJuliaAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowLibCURL_jllJuliaAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumLibCURL_jllJuliaA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighLibCURL_jllJuliaA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumLibCURL_jllJuliaAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumLibCURL_jllJuliaAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumLibCURL_jllJuliaAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumLibCURL_jllJuliaA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighLibCURL_jllJuliaA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighLibCURL_jllJuliaAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumLibCURL_jllJuliaA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumLibCURL_jllJuliaA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalLibCURL_jllJuliaA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumLibCURL_jllJuliaA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighLibCURL_jllJuliacurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...6.5 MediumLibCURL_jllJuliaIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighLibCURL_jllJuliacurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighLibCURL_jllJuliaWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalLibCURL_jllJuliaWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowLibCURL_jllJuliaWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumLibCURL_jllJuliaWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalLibCURL_jllJuliacurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumLibCURL_jllJuliaA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumLibCURL_jllJulialibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighLibCURL_jllJulialibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighLibCURL_jllJuliaThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighLibCURL_jllJuliaA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumLibCURL_jllJuliaAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighLibCURL_jllJuliaAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumLibCURL_jllJuliaAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighLibCURL_jllJuliaWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumLibCURL_jllJuliaA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighLibCURL_jllJuliaWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalLibCURL_jllJulialibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 HighLibCURL_jllJuliaWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumLibCURL_jllJuliaWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumLibCURL_jllJuliacurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 Medium- Show moreLoading…