curl vulnerabilities (SUSE)
172 vulnerabilities.
-
curlSUSE Authorization: Negotiate sent to foreign origin 9.1 Critical -
curlSUSE cross-origin reuse of a Negotiate connection 9.1 Critical -
curlSUSE Negotiate credentials sent to redirected origin 9.1 Critical -
curlSUSE FTP connection reuse inherits client-certificate 9.1 Critical -
curlSUSE password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
curlSUSE HTTP/2 upload Use-After-Free 8.1 High -
curlSUSE curl_mime_free stack overflow by recursion 7.5 High -
curlSUSE -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
curlSUSE TFTP direction confusion 8.1 High -
curlSUSE FTP wildcard write callback mixup 9.1 Critical -
curlSUSE never-ending loop via server response omission 8.1 High -
curlSUSE server-set cookie aborts cookie jar load 8.1 High -
curlSUSE IMAP APPEND plus CRLF conversion command injection 8.1 High -
curlSUSE HSTS response erases persisted entries 8.1 High -
curlSUSE HSTS cache import drops longer-lived child 8.1 High -
curlSUSE leaking host credentials to HTTP proxy 9.1 Critical -
curlSUSE server-set cookie erases cookie jar 8.1 High -
curlSUSE redirect to SFTP or SCP bypasses host verification 8.1 High -
curlSUSE stale SigV4 headers sent unintended 8.1 High -
curlSUSE local interface connection reuse mixup 8.1 High -
curlSUSE domain-scoped PSL domain cookie 8.2 High -
curlSUSE secure cookie attribute bypass with tab 7.5 High -
curlSUSE OpenSSL pinning bypass 7.5 High -
curlSUSE OpenSSL provider use-after-free 7.5 High -
curlSUSE Negotiate ambient user conn reuse 9.8 Critical -
curlSUSE HTTP/2 server push UAF 9.1 Critical -
curlSUSE OpenLDAP SASL authentication bypass 7.4 High -
curlSUSE SSH improper host validation 7.4 High -
curlSUSE sending old referer 7.5 High -
curlSUSE exposing HTTP/3 early data 7.5 High -
curlSUSE UAF after pause in socket callback 7.3 High -
curlSUSE stale proxy password leak 9.8 Critical -
curlSUSE incomplete mTLS config matching in conn reuse 7.5 High -
curlSUSE env-set cross-proxy Digest auth state leak 9.1 Critical -
curlSUSE password leak with netrc and user in URL 9.1 Critical -
curlSUSE trailing dot domain super cookie 9.1 Critical -
curlSUSE wrong reuse for different services 6.5 Medium -
curlSUSE wrong STARTTLS connection reuse 8.1 High -
curlSUSE proto-default skips SSH verification 7.5 High -
curlSUSE cross-origin Digest auth state leak 9.8 Critical -
curlSUSE WS Auto-PONG memory exhaustion 7.5 High -
curlSUSE Native CA trust persist 9.1 Critical -
curlSUSE QUIC zero-length UDP datagrams busy-loop 7.5 High -
curlSUSE HTTP/2 stream-dependency tree UAF 9.8 Critical -
curlSUSE netrc credential leak with reused proxy connection 5.3 Medium -
curlSUSE stale custom cookie host causes cookie leak 7.5 High -
curlSUSE proxy credentials leak over redirect-to proxy 5.9 Medium -
curlSUSE wrong reuse of SMB connection 7.5 High -
curlSUSE wrong reuse of HTTP Negotiate connection 6.5 Medium -
curlSUSE connection reuse ignores TLS requirement 5.9 Medium - Show olderLoading…