libcurl-minimal vulnerabilities (Red Hat)
114 vulnerabilities.
-
libcurl-minimalRed Hat Authorization: Negotiate sent to foreign origin 9.1 Critical -
libcurl-minimalRed Hat wolfSSL public-key pinning bypass 9.1 Critical -
libcurl-minimalRed Hat cross-origin reuse of a Negotiate connection 9.1 Critical -
libcurl-minimalRed Hat Negotiate credentials sent to redirected origin 9.1 Critical -
libcurl-minimalRed Hat FTP connection reuse inherits client-certificate 9.1 Critical -
libcurl-minimalRed Hat password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
libcurl-minimalRed Hat HTTP/2 upload Use-After-Free 8.1 High -
libcurl-minimalRed Hat curl_mime_free stack overflow by recursion 7.5 High -
libcurl-minimalRed Hat -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
libcurl-minimalRed Hat TFTP direction confusion 8.1 High -
libcurl-minimalRed Hat FTP wildcard write callback mixup 9.1 Critical -
libcurl-minimalRed Hat never-ending loop via server response omission 8.1 High -
libcurl-minimalRed Hat server-set cookie aborts cookie jar load 8.1 High -
libcurl-minimalRed Hat knownhost callback mismatches key as missing 7.4 High -
libcurl-minimalRed Hat IMAP APPEND plus CRLF conversion command injection 8.1 High -
libcurl-minimalRed Hat HSTS response erases persisted entries 8.1 High -
libcurl-minimalRed Hat HSTS cache import drops longer-lived child 8.1 High -
libcurl-minimalRed Hat leaking host credentials to HTTP proxy 9.1 Critical -
libcurl-minimalRed Hat server-set cookie erases cookie jar 8.1 High -
libcurl-minimalRed Hat redirect to SFTP or SCP bypasses host verification 8.1 High -
libcurl-minimalRed Hat stale SigV4 headers sent unintended 8.1 High -
libcurl-minimalRed Hat local interface connection reuse mixup 8.1 High -
libcurl-minimalRed Hat info leak uploading over WebSockets with GnuTLS 8.1 High -
libcurl-minimalRed Hat domain-scoped PSL domain cookie 8.2 High -
libcurl-minimalRed Hat secure cookie attribute bypass with tab 7.5 High -
libcurl-minimalRed Hat OpenSSL pinning bypass 7.5 High -
libcurl-minimalRed Hat OpenSSL provider use-after-free 7.5 High -
libcurl-minimalRed Hat Negotiate ambient user conn reuse 9.8 Critical -
libcurl-minimalRed Hat HTTP/2 server push UAF 9.1 Critical -
libcurl-minimalRed Hat OpenLDAP SASL authentication bypass 7.4 High -
libcurl-minimalRed Hat native CA store conn reuse 7.5 High -
libcurl-minimalRed Hat nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length 6.3 Medium -
libcurl-minimalRed Hat SSH improper host validation 7.4 High -
libcurl-minimalRed Hat sending old referer 7.5 High -
libcurl-minimalRed Hat exposing HTTP/3 early data 7.5 High -
libcurl-minimalRed Hat UAF after pause in socket callback 7.3 High -
libcurl-minimalRed Hat stale proxy password leak 9.8 Critical -
libcurl-minimalRed Hat incomplete mTLS config matching in conn reuse 7.5 High -
libcurl-minimalRed Hat env-set cross-proxy Digest auth state leak 9.1 Critical -
libcurl-minimalRed Hat password leak with netrc and user in URL 9.1 Critical -
libcurl-minimalRed Hat SASL double-free 9.8 Critical -
libcurl-minimalRed Hat trailing dot domain super cookie 9.1 Critical -
libcurl-minimalRed Hat wrong reuse for different services 6.5 Medium -
libcurl-minimalRed Hat wrong STARTTLS connection reuse 8.1 High -
libcurl-minimalRed Hat proto-default skips SSH verification 7.5 High -
libcurl-minimalRed Hat cross-origin Digest auth state leak 9.8 Critical -
libcurl-minimalRed Hat WS Auto-PONG memory exhaustion 7.5 High -
libcurl-minimalRed Hat Native CA trust persist 9.1 Critical -
libcurl-minimalRed Hat QUIC zero-length UDP datagrams busy-loop 7.5 High -
libcurl-minimalRed Hat HTTP/2 stream-dependency tree UAF 9.8 Critical - Show olderLoading…