curl vulnerabilities (Ubuntu)
173 vulnerabilities.
curlUbuntuThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighcurlUbuntuA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlUbuntuAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlUbuntuAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlUbuntuAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlUbuntucurl regressionNo scorecurlUbuntucurl vulnerabilitiesNo scorecurlUbuntuWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlUbuntuA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlUbuntuWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlUbuntucurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlUbuntulibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlUbuntucurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlUbuntucurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlUbuntucurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlUbuntucurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlUbuntucurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlUbuntuA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlUbuntuDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlUbuntucurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlUbuntucurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlUbuntuHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlUbuntuDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlUbuntuA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlUbuntulibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 MediumcurlUbuntulibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighcurlUbuntulibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlUbuntuCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlUbuntuA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...4.3 MediumcurlUbuntuCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 MediumcurlUbuntucurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlUbuntuCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlUbuntucurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlUbuntucurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 CriticalcurlUbuntuA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlUbuntuA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 HighcurlUbuntucurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlUbuntulibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 CriticalcurlUbuntulibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 CriticalcurlUbuntuThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlUbuntuThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlUbuntuAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlUbuntulibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlUbuntucurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlUbuntuWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlUbuntuThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 LowcurlUbuntucurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlUbuntucurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 MediumcurlUbuntucurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlUbuntuA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 Low- Show moreLoading…