curl vulnerabilities (Ubuntu)
173 vulnerabilities.
curlUbuntuThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlUbuntuThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlUbuntuThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlUbuntuThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlUbuntuThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlUbuntuThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlUbuntuA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlUbuntuA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlUbuntuMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlUbuntucurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 HighcurlUbuntuUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 HighcurlUbuntucurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 HighcurlUbuntucurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 HighcurlUbuntuThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 HighcurlUbuntuThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...7.5 HighcurlUbuntuThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...9.0 HighcurlUbuntuCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumcurlUbuntuThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...4.3 MediumcurlUbuntucURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set...5.0 MediumcurlUbuntucURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumcurlUbuntuThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...5.0 MediumcurlUbuntucURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlUbuntucURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 Medium