libcurl3-gnutls vulnerabilities (TuxCare)
40 vulnerabilities.
libcurl3-gnutlsTuxCaredomain-scoped PSL domain cookie8.2 Highlibcurl3-gnutlsTuxCareOpenSSL pinning bypass7.5 Highlibcurl3-gnutlsTuxCareHTTP/2 server push UAF9.1 Criticallibcurl3-gnutlsTuxCareincomplete mTLS config matching in conn reuse7.5 Highlibcurl3-gnutlsTuxCareenv-set cross-proxy Digest auth state leak9.1 Criticallibcurl3-gnutlsTuxCaretrailing dot domain super cookie9.1 Criticallibcurl3-gnutlsTuxCarewrong reuse for different services6.5 Mediumlibcurl3-gnutlsTuxCarewrong STARTTLS connection reuse8.1 Highlibcurl3-gnutlsTuxCarecross-origin Digest auth state leak9.8 Criticallibcurl3-gnutlsTuxCarestale custom cookie host causes cookie leak7.5 Highlibcurl3-gnutlsTuxCarewrong reuse of SMB connection7.5 Highlibcurl3-gnutlsTuxCarewrong proxy connection reuse with credentials6.5 Mediumlibcurl3-gnutlsTuxCaretoken leak with redirect and netrc5.3 Mediumlibcurl3-gnutlsTuxCarebad reuse of HTTP Negotiate connection6.5 Mediumlibcurl3-gnutlsTuxCarelibssh key passphrase bypass without agent set3.1 Lowlibcurl3-gnutlsTuxCarelibssh global known_hosts override5.3 Mediumlibcurl3-gnutlsTuxCarebearer token leak on cross-protocol redirect5.3 Mediumlibcurl3-gnutlsTuxCareASN.1 date parser overread6.5 Mediumlibcurl3-gnutlsTuxCareUpdate of alt-phpNo scorelibcurl3-gnutlsTuxCareHTTP/2 push headers memory-leak8.6 Highlibcurl3-gnutlsTuxCareThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 Mediumlibcurl3-gnutlsTuxCareThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 Lowlibcurl3-gnutlsTuxCareAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 Lowlibcurl3-gnutlsTuxCareAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 Mediumlibcurl3-gnutlsTuxCareAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 Mediumlibcurl3-gnutlsTuxCareAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Mediumlibcurl3-gnutlsTuxCareA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 Highlibcurl3-gnutlsTuxCareA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 Mediumlibcurl3-gnutlsTuxCareWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Criticallibcurl3-gnutlsTuxCareWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Lowlibcurl3-gnutlsTuxCareWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Mediumlibcurl3-gnutlsTuxCarelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 Highlibcurl3-gnutlsTuxCarelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 Highlibcurl3-gnutlsTuxCareAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 Highlibcurl3-gnutlsTuxCareWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 Mediumlibcurl3-gnutlsTuxCareA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 Highlibcurl3-gnutlsTuxCarecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 Mediumlibcurl3-gnutlsTuxCarelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 Lowlibcurl3-gnutlsTuxCarecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 Lowlibcurl3-gnutlsTuxCarecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 Medium