libcurl-minimal vulnerabilities (Red Hat)
104 vulnerabilities.
libcurl-minimalRed HatOCSP stapling bypass with Apple SecTrust5.3 Mediumlibcurl-minimalRed Hatnetrc credential leak with reused proxy connection5.3 Mediumlibcurl-minimalRed Hatstale custom cookie host causes cookie leak7.5 Highlibcurl-minimalRed Hatproxy credentials leak over redirect-to proxy5.9 Mediumlibcurl-minimalRed Hatwrong reuse of SMB connection7.5 Highlibcurl-minimalRed Hatwrong reuse of HTTP Negotiate connection6.5 Mediumlibcurl-minimalRed Hatconnection reuse ignores TLS requirement5.9 Mediumlibcurl-minimalRed Hatcross-proxy Digest auth state leak5.3 Mediumlibcurl-minimalRed Hatuse after free in SMB connection reuse7.5 Highlibcurl-minimalRed Hatwrong proxy connection reuse with credentials6.5 Mediumlibcurl-minimalRed Hattoken leak with redirect and netrc5.3 Mediumlibcurl-minimalRed Hatbad reuse of HTTP Negotiate connection6.5 Mediumlibcurl-minimalRed Hatbroken TLS options for threaded LDAPS6.3 Mediumlibcurl-minimalRed Hatlibssh key passphrase bypass without agent set3.1 Lowlibcurl-minimalRed Hatlibssh global known_hosts override5.3 Mediumlibcurl-minimalRed HatOpenSSL partial chain store policy bypass5.3 Mediumlibcurl-minimalRed Hatbearer token leak on cross-protocol redirect5.3 Mediumlibcurl-minimalRed HatNo QUIC certificate pinning with GnuTLS5.9 Mediumlibcurl-minimalRed Hatmissing SFTP host verification with wolfSSH4.3 Mediumlibcurl-minimalRed Hatpredictable WebSocket mask5.3 Mediumlibcurl-minimalRed HatOut of bounds read for cookie path7.5 Highlibcurl-minimalRed HatHTTP/2 push headers memory-leak8.6 Highlibcurl-minimalRed HatThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 Mediumlibcurl-minimalRed HatThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 Lowlibcurl-minimalRed HatThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 Criticallibcurl-minimalRed HatAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 Lowlibcurl-minimalRed HatAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 Mediumlibcurl-minimalRed HatAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 Mediumlibcurl-minimalRed HatAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 Mediumlibcurl-minimalRed HatAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Mediumlibcurl-minimalRed HatA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 Highlibcurl-minimalRed HatA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 Highlibcurl-minimalRed HatAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 Mediumlibcurl-minimalRed HatA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 Mediumlibcurl-minimalRed HatWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Criticallibcurl-minimalRed HatWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Lowlibcurl-minimalRed HatWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Mediumlibcurl-minimalRed HatWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 Criticallibcurl-minimalRed Hatcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Mediumlibcurl-minimalRed Hatlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 Highlibcurl-minimalRed HatA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 Mediumlibcurl-minimalRed HatAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 Highlibcurl-minimalRed HatAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 Mediumlibcurl-minimalRed HatAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 Highlibcurl-minimalRed HatWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 Mediumlibcurl-minimalRed HatA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 Highlibcurl-minimalRed HatWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 Mediumlibcurl-minimalRed HatWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 Mediumlibcurl-minimalRed Hatcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 Mediumlibcurl-minimalRed Hatlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 Low- Show moreLoading…