httpd24-curl vulnerabilities (Red Hat)
39 vulnerabilities.
-
httpd24-curlRed Hat In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can... 5.9 Medium -
httpd24-curlRed Hat curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The... 7.5 High -
httpd24-curlRed Hat DoS for HTTP/2 connections by crafted requests 7.5 High -
httpd24-curlRed Hat curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... 9.1 Critical -
httpd24-curlRed Hat In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the... 9.8 Critical -
httpd24-curlRed Hat A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to... 7.5 High -
httpd24-curlRed Hat A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,... 5.9 Medium -
httpd24-curlRed Hat In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to... 5.3 Medium -
httpd24-curlRed Hat In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a... 8.1 High -
httpd24-curlRed Hat In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if... 7.5 High -
httpd24-curlRed Hat A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... 9.1 Critical -
httpd24-curlRed Hat A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... 7.5 High -
httpd24-curlRed Hat curl FTP path confusion leads to NIL byte out of bounds write 9.8 Critical -
httpd24-curlRed Hat libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When... 9.8 Critical -
httpd24-curlRed Hat The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a... 9.8 Critical -
httpd24-curlRed Hat The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows... 9.8 Critical -
httpd24-curlRed Hat An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When... 9.1 Critical -
httpd24-curlRed Hat libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an... 7.5 High -
httpd24-curlRed Hat Apache httpd allows remote attackers to read secret data from process memory if the Limit... 7.5 High -
httpd24-curlRed Hat curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool... 6.5 Medium -
httpd24-curlRed Hat When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ... 6.5 Medium -
httpd24-curlRed Hat The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate... 2.4 Low -
httpd24-curlRed Hat curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point... 5.9 Medium -
httpd24-curlRed Hat curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names... 5.3 Medium -
httpd24-curlRed Hat curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the... 5.3 Medium -
httpd24-curlRed Hat A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other... 3.3 Low -
httpd24-curlRed Hat The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`.... 3.7 Low -
httpd24-curlRed Hat The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read... 5.3 Medium -
httpd24-curlRed Hat The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow... 6.5 Medium -
httpd24-curlRed Hat The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory... 5.3 Medium -
httpd24-curlRed Hat The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing... 5.3 Medium -
httpd24-curlRed Hat The base64 encode function in curl before version 7.51.0 is prone to a buffer being under... 3.3 Low -
httpd24-curlRed Hat A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case... 3.7 Low -
httpd24-curlRed Hat A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file... 5.3 Medium -
httpd24-curlRed Hat Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ... 9.8 Critical -
httpd24-curlRed Hat curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at... 7.5 High -
httpd24-curlRed Hat Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which... 8.1 High -
httpd24-curlRed Hat curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS... 7.5 High -
httpd24-curlRed Hat curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate... 7.5 High