curl-minimal-debuginfo vulnerabilities (Red Hat)
52 vulnerabilities.
-
curl-minimal-debuginfoRed Hat SSH improper host validation 7.4 High -
curl-minimal-debuginfoRed Hat env-set cross-proxy Digest auth state leak 9.1 Critical -
curl-minimal-debuginfoRed Hat trailing dot domain super cookie 9.1 Critical -
curl-minimal-debuginfoRed Hat wrong reuse for different services 6.5 Medium -
curl-minimal-debuginfoRed Hat wrong STARTTLS connection reuse 8.1 High -
curl-minimal-debuginfoRed Hat cross-origin Digest auth state leak 9.8 Critical -
curl-minimal-debuginfoRed Hat token leak with redirect and netrc 5.3 Medium -
curl-minimal-debuginfoRed Hat bad reuse of HTTP Negotiate connection 6.5 Medium -
curl-minimal-debuginfoRed Hat Out of bounds read for cookie path 7.5 High -
curl-minimal-debuginfoRed Hat HTTP/2 push headers memory-leak 8.6 High -
curl-minimal-debuginfoRed Hat This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
curl-minimal-debuginfoRed Hat This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
curl-minimal-debuginfoRed Hat This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
curl-minimal-debuginfoRed Hat An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
curl-minimal-debuginfoRed Hat An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... 5.9 Medium -
curl-minimal-debuginfoRed Hat An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... 5.5 Medium -
curl-minimal-debuginfoRed Hat An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... 5.9 Medium -
curl-minimal-debuginfoRed Hat An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... 5.9 Medium -
curl-minimal-debuginfoRed Hat A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
curl-minimal-debuginfoRed Hat A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
curl-minimal-debuginfoRed Hat An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... 6.5 Medium -
curl-minimal-debuginfoRed Hat A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium -
curl-minimal-debuginfoRed Hat When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... 9.8 Critical -
curl-minimal-debuginfoRed Hat When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... 3.7 Low -
curl-minimal-debuginfoRed Hat When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... 5.9 Medium -
curl-minimal-debuginfoRed Hat When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... 9.8 Critical -
curl-minimal-debuginfoRed Hat curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... 6.5 Medium -
curl-minimal-debuginfoRed Hat libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been... 7.5 High -
curl-minimal-debuginfoRed Hat A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... 6.5 Medium -
curl-minimal-debuginfoRed Hat An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... 7.5 High -
curl-minimal-debuginfoRed Hat An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... 5.7 Medium -
curl-minimal-debuginfoRed Hat An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... 8.1 High -
curl-minimal-debuginfoRed Hat When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... 5.9 Medium -
curl-minimal-debuginfoRed Hat A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... 7.5 High -
curl-minimal-debuginfoRed Hat When curl is instructed to get content using the metalink feature, and a user name and password... 5.3 Medium -
curl-minimal-debuginfoRed Hat When curl is instructed to download content using the metalink feature, thecontents is verified... 6.5 Medium -
curl-minimal-debuginfoRed Hat curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... 5.3 Medium -
curl-minimal-debuginfoRed Hat libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... 3.7 Low -
curl-minimal-debuginfoRed Hat curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... 3.1 Low -
curl-minimal-debuginfoRed Hat curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information... 5.3 Medium -
curl-minimal-debuginfoRed Hat curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... 7.5 High -
curl-minimal-debuginfoRed Hat curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to... 7.5 High -
curl-minimal-debuginfoRed Hat A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting... 3.7 Low -
curl-minimal-debuginfoRed Hat Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when... 7.5 High -
curl-minimal-debuginfoRed Hat curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other... 7.8 High -
curl-minimal-debuginfoRed Hat Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. 9.8 Critical -
curl-minimal-debuginfoRed Hat Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. 9.8 Critical -
curl-minimal-debuginfoRed Hat A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in... 7.8 High -
curl-minimal-debuginfoRed Hat libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the... 4.3 Medium -
curl-minimal-debuginfoRed Hat libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow.... 7.1 High - Show olderLoading…