curl vulnerabilities (Ubuntu)
173 vulnerabilities.
-
curlUbuntu password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
curlUbuntu HTTP/2 upload Use-After-Free 8.1 High -
curlUbuntu curl_mime_free stack overflow by recursion 7.5 High -
curlUbuntu -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
curlUbuntu TFTP direction confusion 8.1 High -
curlUbuntu FTP wildcard write callback mixup 9.1 Critical -
curlUbuntu never-ending loop via server response omission 8.1 High -
curlUbuntu server-set cookie aborts cookie jar load 8.1 High -
curlUbuntu knownhost callback mismatches key as missing 7.4 High -
curlUbuntu IMAP APPEND plus CRLF conversion command injection 8.1 High -
curlUbuntu HSTS response erases persisted entries 8.1 High -
curlUbuntu HSTS cache import drops longer-lived child 8.1 High -
curlUbuntu leaking host credentials to HTTP proxy 9.1 Critical -
curlUbuntu server-set cookie erases cookie jar 8.1 High -
curlUbuntu redirect to SFTP or SCP bypasses host verification 8.1 High -
curlUbuntu stale SigV4 headers sent unintended 8.1 High -
curlUbuntu local interface connection reuse mixup 8.1 High -
curlUbuntu info leak uploading over WebSockets with GnuTLS 8.1 High -
curlUbuntu curl regression No score -
curlUbuntu domain-scoped PSL domain cookie 8.2 High -
curlUbuntu secure cookie attribute bypass with tab 7.5 High -
curlUbuntu OpenSSL pinning bypass 7.5 High -
curlUbuntu OpenSSL provider use-after-free 7.5 High -
curlUbuntu HTTP/2 server push UAF 9.1 Critical -
curlUbuntu OpenLDAP SASL authentication bypass 7.4 High -
curlUbuntu SSH improper host validation 7.4 High -
curlUbuntu exposing HTTP/3 early data 7.5 High -
curlUbuntu UAF after pause in socket callback 7.3 High -
curlUbuntu stale proxy password leak 9.8 Critical -
curlUbuntu incomplete mTLS config matching in conn reuse 7.5 High -
curlUbuntu env-set cross-proxy Digest auth state leak 9.1 Critical -
curlUbuntu password leak with netrc and user in URL 9.1 Critical -
curlUbuntu SASL double-free 9.8 Critical -
curlUbuntu trailing dot domain super cookie 9.1 Critical -
curlUbuntu wrong reuse for different services 6.5 Medium -
curlUbuntu wrong STARTTLS connection reuse 8.1 High -
curlUbuntu proto-default skips SSH verification 7.5 High -
curlUbuntu cross-origin Digest auth state leak 9.8 Critical -
curlUbuntu WS Auto-PONG memory exhaustion 7.5 High -
curlUbuntu Native CA trust persist 9.1 Critical -
curlUbuntu QUIC zero-length UDP datagrams busy-loop 7.5 High -
curlUbuntu HTTP/2 stream-dependency tree UAF 9.8 Critical -
curlUbuntu netrc credential leak with reused proxy connection 5.3 Medium -
curlUbuntu stale custom cookie host causes cookie leak 7.5 High -
curlUbuntu proxy credentials leak over redirect-to proxy 5.9 Medium -
curlUbuntu wrong reuse of SMB connection 7.5 High -
curlUbuntu wrong reuse of HTTP Negotiate connection 6.5 Medium -
curlUbuntu connection reuse ignores TLS requirement 5.9 Medium -
curlUbuntu cross-proxy Digest auth state leak 5.3 Medium -
curlUbuntu use after free in SMB connection reuse 7.5 High - Show olderLoading…