libcurl vulnerabilities (Red Hat)
127 vulnerabilities.
libcurlRed HatOCSP stapling bypass with Apple SecTrust5.3 MediumlibcurlRed Hatnetrc credential leak with reused proxy connection5.3 MediumlibcurlRed Hatstale custom cookie host causes cookie leak7.5 HighlibcurlRed Hatproxy credentials leak over redirect-to proxy5.9 MediumlibcurlRed Hatwrong reuse of SMB connection7.5 HighlibcurlRed Hatwrong reuse of HTTP Negotiate connection6.5 MediumlibcurlRed Hatconnection reuse ignores TLS requirement5.9 MediumlibcurlRed Hatcross-proxy Digest auth state leak5.3 MediumlibcurlRed Hatuse after free in SMB connection reuse7.5 HighlibcurlRed Hatwrong proxy connection reuse with credentials6.5 MediumlibcurlRed Hattoken leak with redirect and netrc5.3 MediumlibcurlRed Hatbad reuse of HTTP Negotiate connection6.5 MediumlibcurlRed Hatbroken TLS options for threaded LDAPS6.3 MediumlibcurlRed Hatlibssh key passphrase bypass without agent set3.1 LowlibcurlRed Hatlibssh global known_hosts override5.3 MediumlibcurlRed HatOpenSSL partial chain store policy bypass5.3 MediumlibcurlRed Hatbearer token leak on cross-protocol redirect5.3 MediumlibcurlRed HatNo QUIC certificate pinning with GnuTLS5.9 MediumlibcurlRed Hatmissing SFTP host verification with wolfSSH4.3 MediumlibcurlRed Hatpredictable WebSocket mask5.3 MediumlibcurlRed HatOut of bounds read for cookie path7.5 HighlibcurlRed HatHTTP/2 push headers memory-leak8.6 HighlibcurlRed HatThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumlibcurlRed HatThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowlibcurlRed HatThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticallibcurlRed HatAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowlibcurlRed HatAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumlibcurlRed HatAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumlibcurlRed HatAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumlibcurlRed HatAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumlibcurlRed HatA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighlibcurlRed HatA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighlibcurlRed HatAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumlibcurlRed HatA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumlibcurlRed HatWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticallibcurlRed HatWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowlibcurlRed HatWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumlibcurlRed HatWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticallibcurlRed Hatcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumlibcurlRed Hatlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighlibcurlRed HatA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumlibcurlRed HatAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighlibcurlRed HatAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumlibcurlRed HatAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighlibcurlRed HatWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumlibcurlRed HatA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighlibcurlRed HatWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumlibcurlRed HatWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumlibcurlRed Hatcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumlibcurlRed Hatlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 Low- Show moreLoading…