libcurl vulnerabilities (Red Hat)
127 vulnerabilities.
libcurlRed Hatcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowlibcurlRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumlibcurlRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighlibcurlRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighlibcurlRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowlibcurlRed HatDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighlibcurlRed Hatcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighlibcurlRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticallibcurlRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticallibcurlRed HatA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighlibcurlRed Hatlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 MediumlibcurlRed Hatlibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighlibcurlRed Hatlibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumlibcurlRed Hatset_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg...7.8 HighlibcurlRed HatCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumlibcurlRed Hatcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighlibcurlRed Hatcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticallibcurlRed HatA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticallibcurlRed HatA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighlibcurlRed Hatcurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticallibcurlRed Hatcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...9.8 CriticallibcurlRed Hatlibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 CriticallibcurlRed HatAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticallibcurlRed HatMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticallibcurlRed Hatcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighlibcurlRed Hatcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighlibcurlRed Hatcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighlibcurlRed HatCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumlibcurlRed HatThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 MediumlibcurlRed HatcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumlibcurlRed HatcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumlibcurlRed HatcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 MediumlibcurlRed HatThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 MediumlibcurlRed HatcURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re...4.0 MediumlibcurlRed HatHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 MediumlibcurlRed HatThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...5.0 MediumlibcurlRed HatThe Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used...4.3 Medium