curl vulnerabilities (Red Hat)
132 vulnerabilities.
curlRed HatOCSP stapling bypass with Apple SecTrust5.3 MediumcurlRed Hatnetrc credential leak with reused proxy connection5.3 MediumcurlRed Hatstale custom cookie host causes cookie leak7.5 HighcurlRed Hatproxy credentials leak over redirect-to proxy5.9 MediumcurlRed Hatwrong reuse of SMB connection7.5 HighcurlRed Hatwrong reuse of HTTP Negotiate connection6.5 MediumcurlRed Hatconnection reuse ignores TLS requirement5.9 MediumcurlRed Hatcross-proxy Digest auth state leak5.3 MediumcurlRed Hatuse after free in SMB connection reuse7.5 HighcurlRed Hatwrong proxy connection reuse with credentials6.5 MediumcurlRed Hattoken leak with redirect and netrc5.3 MediumcurlRed Hatbad reuse of HTTP Negotiate connection6.5 MediumcurlRed Hatbroken TLS options for threaded LDAPS6.3 MediumcurlRed Hatlibssh key passphrase bypass without agent set3.1 LowcurlRed Hatlibssh global known_hosts override5.3 MediumcurlRed HatOpenSSL partial chain store policy bypass5.3 MediumcurlRed Hatbearer token leak on cross-protocol redirect5.3 MediumcurlRed HatNo QUIC certificate pinning with GnuTLS5.9 MediumcurlRed Hatmissing SFTP host verification with wolfSSH4.3 MediumcurlRed Hatpredictable WebSocket mask5.3 MediumcurlRed HatOut of bounds read for cookie path7.5 HighcurlRed HatHTTP/2 push headers memory-leak8.6 HighcurlRed HatThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlRed HatThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlRed HatThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlRed HatAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlRed HatAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlRed HatAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlRed HatAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlRed HatAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlRed HatA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlRed HatA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlRed HatAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlRed HatA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlRed HatWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlRed HatWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlRed HatWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlRed HatWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlRed Hatcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlRed Hatlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlRed HatA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlRed HatAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlRed HatAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlRed HatAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlRed HatWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlRed HatA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlRed HatWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlRed HatWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlRed Hatcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlRed Hatlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 Low- Show moreLoading…