libcurl-devel vulnerabilities (Red Hat)
127 vulnerabilities.
libcurl-develRed Hatcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 Lowlibcurl-develRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 Mediumlibcurl-develRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 Highlibcurl-develRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 Highlibcurl-develRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 Lowlibcurl-develRed HatDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 Highlibcurl-develRed Hatcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 Highlibcurl-develRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Criticallibcurl-develRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Criticallibcurl-develRed HatA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 Highlibcurl-develRed Hatlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 Mediumlibcurl-develRed Hatlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 Highlibcurl-develRed Hatlibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 Mediumlibcurl-develRed Hatset_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg...7.8 Highlibcurl-develRed HatCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 Mediumlibcurl-develRed Hatcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 Highlibcurl-develRed Hatcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 Criticallibcurl-develRed HatA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 Criticallibcurl-develRed HatA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 Highlibcurl-develRed Hatcurl FTP path confusion leads to NIL byte out of bounds write9.8 Criticallibcurl-develRed Hatcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...9.8 Criticallibcurl-develRed Hatlibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 Criticallibcurl-develRed HatAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 Criticallibcurl-develRed HatMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 Criticallibcurl-develRed Hatcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 Highlibcurl-develRed Hatcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 Highlibcurl-develRed Hatcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 Highlibcurl-develRed HatCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 Mediumlibcurl-develRed HatThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 Mediumlibcurl-develRed HatcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 Mediumlibcurl-develRed HatcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 Mediumlibcurl-develRed HatcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 Mediumlibcurl-develRed HatThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 Mediumlibcurl-develRed HatcURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 Mediumlibcurl-develRed HatHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 Mediumlibcurl-develRed HatThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...5.0 Mediumlibcurl-develRed HatThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 Medium