curl vulnerabilities (Mageia)
144 vulnerabilities.
-
curlMageia Authorization: Negotiate sent to foreign origin 9.1 Critical -
curlMageia cross-origin reuse of a Negotiate connection 9.1 Critical -
curlMageia auto client cert connection reuse mixup 7.5 High -
curlMageia Negotiate credentials sent to redirected origin 9.1 Critical -
curlMageia FTP connection reuse inherits client-certificate 9.1 Critical -
curlMageia password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
curlMageia HTTP/2 upload Use-After-Free 8.1 High -
curlMageia curl_mime_free stack overflow by recursion 7.5 High -
curlMageia -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
curlMageia TFTP direction confusion 8.1 High -
curlMageia FTP wildcard write callback mixup 9.1 Critical -
curlMageia never-ending loop via server response omission 8.1 High -
curlMageia server-set cookie aborts cookie jar load 8.1 High -
curlMageia IMAP APPEND plus CRLF conversion command injection 8.1 High -
curlMageia HSTS response erases persisted entries 8.1 High -
curlMageia HSTS cache import drops longer-lived child 8.1 High -
curlMageia leaking host credentials to HTTP proxy 9.1 Critical -
curlMageia server-set cookie erases cookie jar 8.1 High -
curlMageia redirect to SFTP or SCP bypasses host verification 8.1 High -
curlMageia stale SigV4 headers sent unintended 8.1 High -
curlMageia local interface connection reuse mixup 8.1 High -
curlMageia Updated curl package fixes security vulnerabilities No score -
curlMageia domain-scoped PSL domain cookie 8.2 High -
curlMageia secure cookie attribute bypass with tab 7.5 High -
curlMageia OpenSSL pinning bypass 7.5 High -
curlMageia OpenSSL provider use-after-free 7.5 High -
curlMageia Negotiate ambient user conn reuse 9.8 Critical -
curlMageia HTTP/2 server push UAF 9.1 Critical -
curlMageia OpenLDAP SASL authentication bypass 7.4 High -
curlMageia wolfSSL CA-cache hit overrides callback 7.5 High -
curlMageia native CA store conn reuse 7.5 High -
curlMageia broken TLS options for threaded LDAPS 6.3 Medium -
curlMageia libssh key passphrase bypass without agent set 3.1 Low -
curlMageia libssh global known_hosts override 5.3 Medium -
curlMageia OpenSSL partial chain store policy bypass 5.3 Medium -
curlMageia bearer token leak on cross-protocol redirect 5.3 Medium -
curlMageia No QUIC certificate pinning with GnuTLS 5.9 Medium -
curlMageia Out of bounds read for cookie path 7.5 High -
curlMageia gzip integer overflow 7.3 High -
curlMageia eventfd double close 7.0 High -
curlMageia netrc and default credential leak 3.4 Low -
curlMageia netrc and redirect credential leak 3.4 Low -
curlMageia HSTS subdomain overwrites parent cache entry 6.5 Medium -
curlMageia TLS certificate check bypass with mbedTLS 6.5 Medium -
curlMageia QUIC certificate check bypass with wolfSSL 6.3 Medium -
curlMageia HTTP/2 push headers memory-leak 8.6 High -
curlMageia Usage of disabled protocol 3.5 Low -
curlMageia When saving HSTS data to an excessively long file name, curl could end up removing all contents,... 5.3 Medium -
curlMageia This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
curlMageia This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low - Show olderLoading…