curl vulnerabilities (Red Hat)
132 vulnerabilities.
curlRed Hatcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlRed HatDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlRed Hatcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlRed HatA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlRed Hatlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 MediumcurlRed Hatlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighcurlRed Hatlibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlRed Hatset_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg...7.8 HighcurlRed HatCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlRed Hatcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlRed Hatcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlRed HatA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlRed HatA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlRed Hatcurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlRed Hatcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...9.8 CriticalcurlRed Hatlibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 CriticalcurlRed HatAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlRed HatMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlRed Hatcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighcurlRed Hatcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlRed Hatcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlRed HatCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumcurlRed HatThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 MediumcurlRed HatcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumcurlRed HatcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlRed HatcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 MediumcurlRed HatThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 MediumcurlRed HatcURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 MediumcurlRed HatHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 MediumcurlRed HatThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...5.0 MediumcurlRed HatThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 MediumcurlRed Hatcontent_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly...6.8 MediumcurlRed Hatlib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly...7.5 HighcurlRed HatThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION...6.8 MediumcurlRed HatMultiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users...4.6 MediumcurlRed HatMultiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions,...8.8 High