curl-openssl1 vulnerabilities (SUSE)
40 vulnerabilities.
-
curl-openssl1SUSE When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... 5.9 Medium -
curl-openssl1SUSE A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... 7.5 High -
curl-openssl1SUSE When curl is instructed to get content using the metalink feature, and a user name and password... 5.3 Medium -
curl-openssl1SUSE When curl is instructed to download content using the metalink feature, thecontents is verified... 6.5 Medium -
curl-openssl1SUSE curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... 5.3 Medium -
curl-openssl1SUSE libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... 3.7 Low -
curl-openssl1SUSE curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... 3.1 Low -
curl-openssl1SUSE curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information... 5.3 Medium -
curl-openssl1SUSE curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... 7.5 High -
curl-openssl1SUSE A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting... 3.7 Low -
curl-openssl1SUSE Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when... 7.5 High -
curl-openssl1SUSE curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other... 7.8 High -
curl-openssl1SUSE Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. 9.8 Critical -
curl-openssl1SUSE A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in... 7.8 High -
curl-openssl1SUSE Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the... 4.4 Medium -
curl-openssl1SUSE A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code... 4.3 Medium -
curl-openssl1SUSE curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The... 7.5 High -
curl-openssl1SUSE curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... 9.1 Critical -
curl-openssl1SUSE A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... 9.1 Critical -
curl-openssl1SUSE A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... 7.5 High -
curl-openssl1SUSE curl FTP path confusion leads to NIL byte out of bounds write 9.8 Critical -
curl-openssl1SUSE libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When... 9.8 Critical -
curl-openssl1SUSE libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an... 7.5 High -
curl-openssl1SUSE When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ... 6.5 Medium -
curl-openssl1SUSE The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate... 2.4 Low -
curl-openssl1SUSE curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point... 5.9 Medium -
curl-openssl1SUSE curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the... 5.3 Medium -
curl-openssl1SUSE A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other... 3.3 Low -
curl-openssl1SUSE The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`.... 3.7 Low -
curl-openssl1SUSE The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read... 5.3 Medium -
curl-openssl1SUSE The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow... 6.5 Medium -
curl-openssl1SUSE The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory... 5.3 Medium -
curl-openssl1SUSE The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing... 5.3 Medium -
curl-openssl1SUSE The base64 encode function in curl before version 7.51.0 is prone to a buffer being under... 3.3 Low -
curl-openssl1SUSE A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case... 3.7 Low -
curl-openssl1SUSE A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file... 5.3 Medium -
curl-openssl1SUSE Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ... 9.8 Critical -
curl-openssl1SUSE curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at... 7.5 High -
curl-openssl1SUSE curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS... 7.5 High -
curl-openssl1SUSE curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate... 7.5 High