curl vulnerabilities (SUSE)
172 vulnerabilities.
curlSUSEcross-proxy Digest auth state leak5.3 MediumcurlSUSEuse after free in SMB connection reuse7.5 HighcurlSUSEwrong proxy connection reuse with credentials6.5 MediumcurlSUSEtoken leak with redirect and netrc5.3 MediumcurlSUSEbad reuse of HTTP Negotiate connection6.5 MediumcurlSUSEbroken TLS options for threaded LDAPS6.3 MediumcurlSUSElibssh key passphrase bypass without agent set3.1 LowcurlSUSElibssh global known_hosts override5.3 MediumcurlSUSEOpenSSL partial chain store policy bypass5.3 MediumcurlSUSEbearer token leak on cross-protocol redirect5.3 MediumcurlSUSEwcurl path traversal with percent-encoded slashes4.6 MediumcurlSUSEpredictable WebSocket mask5.3 MediumcurlSUSEOut of bounds read for cookie path7.5 HighcurlSUSEWebSocket endless loop7.5 HighcurlSUSENo QUIC certificate pinning with wolfSSL4.8 MediumcurlSUSEQUIC certificate check skip with wolfSSL6.5 MediumcurlSUSEgzip integer overflow7.3 HighcurlSUSEeventfd double close7.0 HighcurlSUSEnetrc and default credential leak3.4 LowcurlSUSEnetrc and redirect credential leak3.4 LowcurlSUSEHSTS subdomain overwrites parent cache entry6.5 MediumcurlSUSEOCSP stapling bypass with GnuTLS6.5 MediumcurlSUSEASN.1 date parser overread6.5 MediumcurlSUSEmacidn punycode buffer overread4.3 MediumcurlSUSEfreeing stack buffer in utf8asn1str7.5 HighcurlSUSETLS certificate check bypass with mbedTLS6.5 MediumcurlSUSEQUIC certificate check bypass with wolfSSL6.3 MediumcurlSUSEHTTP/2 push headers memory-leak8.6 HighcurlSUSEUsage of disabled protocol3.5 LowcurlSUSEWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlSUSEThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlSUSEThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlSUSEThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlSUSEWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlSUSElibcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called...0.0 NonecurlSUSEA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlSUSEAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlSUSEAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlSUSEA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighcurlSUSEAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlSUSEAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlSUSEAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlSUSEA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlSUSEA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlSUSEAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlSUSEA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlSUSEA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlSUSEA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlSUSEA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlSUSEIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 High- Show moreLoading…