curl vulnerabilities (Mageia)
144 vulnerabilities.
curlMageiacurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 CriticalcurlMageiaA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlMageiaA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlMageiacurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlMageialibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 CriticalcurlMageiaXXE vulnerability in Jenkins PMD Plugin8.8 HighcurlMageiaThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlMageiaThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlMageiaAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlMageialibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlMageiacurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlMageiaWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlMageiaWhen asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data...6.5 MediumcurlMageiaThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 LowcurlMageiacurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlMageiacurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlMageiaA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 LowcurlMageiaThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlMageiaThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlMageiaThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlMageiaThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlMageiaThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlMageiaThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlMageiaA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlMageiaA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlMageiaMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlMageiaUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 HighcurlMageiacurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlMageiacurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlMageiaThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 HighcurlMageiaThe smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB...6.4 MediumcurlMageiacURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a...5.0 MediumcurlMageiaThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...7.5 HighcurlMageiaCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumcurlMageiaThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 MediumcurlMageiacURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set...5.0 MediumcurlMageiacURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumcurlMageiacURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlMageiacURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 MediumcurlMageiacURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 MediumcurlMageiaThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 MediumcurlMageiacURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 MediumcurlMageiacURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and...4.3 MediumcurlMageiaHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 Medium