curl vulnerabilities (SUSE)
172 vulnerabilities.
curlSUSEcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlSUSEcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlSUSEA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 LowcurlSUSEThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlSUSEThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlSUSEThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlSUSEThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlSUSEThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlSUSEThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlSUSEA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlSUSEA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlSUSEMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlSUSEcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighcurlSUSEUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 HighcurlSUSEcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlSUSEcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlSUSEThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 HighcurlSUSEThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...7.5 HighcurlSUSEThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...9.0 HighcurlSUSEThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...5.0 MediumcurlSUSEcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlSUSEcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 Medium