curl-debuginfo vulnerabilities (Red Hat)
89 vulnerabilities.
curl-debuginfoRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 Mediumcurl-debuginfoRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 Highcurl-debuginfoRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 Highcurl-debuginfoRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 Lowcurl-debuginfoRed HatDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 Highcurl-debuginfoRed Hatcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 Highcurl-debuginfoRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Criticalcurl-debuginfoRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Criticalcurl-debuginfoRed HatA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 Highcurl-debuginfoRed Hatlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 Mediumcurl-debuginfoRed Hatlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 Highcurl-debuginfoRed Hatlibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 Mediumcurl-debuginfoRed Hatset_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg...7.8 Highcurl-debuginfoRed HatCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 Mediumcurl-debuginfoRed Hatcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 Highcurl-debuginfoRed Hatcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 Criticalcurl-debuginfoRed HatA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 Criticalcurl-debuginfoRed HatA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 Highcurl-debuginfoRed Hatcurl FTP path confusion leads to NIL byte out of bounds write9.8 Criticalcurl-debuginfoRed Hatcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...9.8 Criticalcurl-debuginfoRed Hatlibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 Criticalcurl-debuginfoRed HatAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 Criticalcurl-debuginfoRed HatMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 Criticalcurl-debuginfoRed Hatcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 Highcurl-debuginfoRed Hatcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 Highcurl-debuginfoRed Hatcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 Highcurl-debuginfoRed HatCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 Mediumcurl-debuginfoRed HatThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 Mediumcurl-debuginfoRed HatcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 Mediumcurl-debuginfoRed HatcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 Mediumcurl-debuginfoRed HatcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 Mediumcurl-debuginfoRed HatThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 Mediumcurl-debuginfoRed HatcURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 Mediumcurl-debuginfoRed HatHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 Mediumcurl-debuginfoRed HatThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...5.0 Mediumcurl-debuginfoRed HatThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 Mediumcurl-debuginfoRed Hatcontent_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly...6.8 Mediumcurl-debuginfoRed Hatlib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly...7.5 Highcurl-debuginfoRed HatThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION...6.8 Mediumcurl-debuginfoRed HatMultiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users...4.6 Mediumcurl-debuginfoRed HatMultiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions,...8.8 High