curl vulnerabilities (Mageia)
144 vulnerabilities.
curlMageiaThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlMageiaWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlMageiaA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlMageiaAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlMageiaAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlMageiaA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighcurlMageiaA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumcurlMageiaAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlMageiaAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlMageiaAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlMageiaA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlMageiaA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlMageiaAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlMageiaA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlMageiaA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlMageiaWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlMageiaWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlMageiaWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlMageiaWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlMageiacurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlMageiaA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlMageialibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlMageialibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlMageiaA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlMageiaAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlMageiaAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlMageiaAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlMageiaWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlMageiaA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlMageiaWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlMageiaWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlMageiaWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlMageiacurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlMageialibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlMageiacurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlMageiacurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlMageiacurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlMageiacurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlMageiacurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlMageiaA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlMageiaDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlMageiacurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlMageiacurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlMageiaHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlMageiaDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlMageiaAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 LowcurlMageiaA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlMageiacurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlMageiaCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlMageiacurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 Critical- Show moreLoading…