curl vulnerabilities (SUSE)
172 vulnerabilities.
curlSUSEWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlSUSEWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlSUSEWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlSUSEWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlSUSEcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlSUSEA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlSUSElibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlSUSElibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlSUSEA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlSUSEAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlSUSEAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlSUSEAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlSUSEWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlSUSEA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlSUSEWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlSUSEWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlSUSEcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlSUSElibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlSUSEcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlSUSEcurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlSUSEcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlSUSEcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlSUSEcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlSUSEA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlSUSEDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlSUSEcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlSUSEcurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlSUSEHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlSUSEDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlSUSEA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlSUSElibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 MediumcurlSUSElibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighcurlSUSElibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlSUSECurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlSUSEA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...4.3 MediumcurlSUSECurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 MediumcurlSUSEcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlSUSECurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlSUSEcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlSUSEA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlSUSEA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlSUSEcurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlSUSElibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 CriticalcurlSUSEThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlSUSEThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlSUSEAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlSUSElibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlSUSEcurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlSUSEWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlSUSEThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 Low- Show moreLoading…