libcurl-minimal vulnerabilities (TuxCare)
52 vulnerabilities.
-
libcurl-minimalTuxCare domain-scoped PSL domain cookie 8.2 High -
libcurl-minimalTuxCare OpenSSL pinning bypass 7.5 High -
libcurl-minimalTuxCare HTTP/2 server push UAF 9.1 Critical -
libcurl-minimalTuxCare incomplete mTLS config matching in conn reuse 7.5 High -
libcurl-minimalTuxCare env-set cross-proxy Digest auth state leak 9.1 Critical -
libcurl-minimalTuxCare password leak with netrc and user in URL 9.1 Critical -
libcurl-minimalTuxCare trailing dot domain super cookie 9.1 Critical -
libcurl-minimalTuxCare wrong reuse for different services 6.5 Medium -
libcurl-minimalTuxCare wrong STARTTLS connection reuse 8.1 High -
libcurl-minimalTuxCare cross-origin Digest auth state leak 9.8 Critical -
libcurl-minimalTuxCare netrc credential leak with reused proxy connection 5.3 Medium -
libcurl-minimalTuxCare stale custom cookie host causes cookie leak 7.5 High -
libcurl-minimalTuxCare proxy credentials leak over redirect-to proxy 5.9 Medium -
libcurl-minimalTuxCare wrong reuse of SMB connection 7.5 High -
libcurl-minimalTuxCare wrong reuse of HTTP Negotiate connection 6.5 Medium -
libcurl-minimalTuxCare connection reuse ignores TLS requirement 5.9 Medium -
libcurl-minimalTuxCare cross-proxy Digest auth state leak 5.3 Medium -
libcurl-minimalTuxCare wrong proxy connection reuse with credentials 6.5 Medium -
libcurl-minimalTuxCare token leak with redirect and netrc 5.3 Medium -
libcurl-minimalTuxCare bad reuse of HTTP Negotiate connection 6.5 Medium -
libcurl-minimalTuxCare libssh key passphrase bypass without agent set 3.1 Low -
libcurl-minimalTuxCare libssh global known_hosts override 5.3 Medium -
libcurl-minimalTuxCare bearer token leak on cross-protocol redirect 5.3 Medium -
libcurl-minimalTuxCare Out of bounds read for cookie path 7.5 High -
libcurl-minimalTuxCare netrc and default credential leak 3.4 Low -
libcurl-minimalTuxCare HSTS subdomain overwrites parent cache entry 6.5 Medium -
libcurl-minimalTuxCare ASN.1 date parser overread 6.5 Medium -
libcurl-minimalTuxCare HTTP/2 push headers memory-leak 8.6 High -
libcurl-minimalTuxCare This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
libcurl-minimalTuxCare This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
libcurl-minimalTuxCare An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
libcurl-minimalTuxCare An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... 5.9 Medium -
libcurl-minimalTuxCare An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... 5.5 Medium -
libcurl-minimalTuxCare An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... 5.9 Medium -
libcurl-minimalTuxCare An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... 5.9 Medium -
libcurl-minimalTuxCare A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
libcurl-minimalTuxCare A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
libcurl-minimalTuxCare An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... 6.5 Medium -
libcurl-minimalTuxCare A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium -
libcurl-minimalTuxCare When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... 9.8 Critical -
libcurl-minimalTuxCare When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... 3.7 Low -
libcurl-minimalTuxCare When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... 5.9 Medium -
libcurl-minimalTuxCare curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... 6.5 Medium -
libcurl-minimalTuxCare libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been... 7.5 High -
libcurl-minimalTuxCare libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... 7.5 High -
libcurl-minimalTuxCare The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... 7.5 High -
libcurl-minimalTuxCare A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... 6.5 Medium -
libcurl-minimalTuxCare An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... 5.7 Medium -
libcurl-minimalTuxCare An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... 8.1 High -
libcurl-minimalTuxCare curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... 5.3 Medium - Show olderLoading…