libcurl3 vulnerabilities (TuxCare)
28 vulnerabilities.
-
libcurl3TuxCare domain-scoped PSL domain cookie 8.2 High -
libcurl3TuxCare OpenSSL pinning bypass 7.5 High -
libcurl3TuxCare incomplete mTLS config matching in conn reuse 7.5 High -
libcurl3TuxCare env-set cross-proxy Digest auth state leak 9.1 Critical -
libcurl3TuxCare trailing dot domain super cookie 9.1 Critical -
libcurl3TuxCare wrong STARTTLS connection reuse 8.1 High -
libcurl3TuxCare cross-origin Digest auth state leak 9.8 Critical -
libcurl3TuxCare wrong reuse of SMB connection 7.5 High -
libcurl3TuxCare ASN.1 date parser overread 6.5 Medium -
libcurl3TuxCare HTTP/2 push headers memory-leak 8.6 High -
libcurl3TuxCare This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
libcurl3TuxCare This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
libcurl3TuxCare An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
libcurl3TuxCare An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... 5.9 Medium -
libcurl3TuxCare An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... 5.9 Medium -
libcurl3TuxCare A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
libcurl3TuxCare A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium -
libcurl3TuxCare When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... 9.8 Critical -
libcurl3TuxCare When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... 3.7 Low -
libcurl3TuxCare When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... 5.9 Medium -
libcurl3TuxCare libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been... 7.5 High -
libcurl3TuxCare libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... 7.5 High -
libcurl3TuxCare An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... 8.1 High -
libcurl3TuxCare When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... 5.9 Medium -
libcurl3TuxCare A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... 7.5 High -
libcurl3TuxCare curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... 5.3 Medium -
libcurl3TuxCare libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... 3.7 Low -
libcurl3TuxCare curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... 3.1 Low