curl vulnerabilities (Ubuntu)
173 vulnerabilities.
curlUbuntuwrong proxy connection reuse with credentials6.5 MediumcurlUbuntutoken leak with redirect and netrc5.3 MediumcurlUbuntubad reuse of HTTP Negotiate connection6.5 MediumcurlUbuntubroken TLS options for threaded LDAPS6.3 MediumcurlUbuntulibssh key passphrase bypass without agent set3.1 LowcurlUbuntulibssh global known_hosts override5.3 MediumcurlUbuntuOpenSSL partial chain store policy bypass5.3 MediumcurlUbuntubearer token leak on cross-protocol redirect5.3 MediumcurlUbuntuNo QUIC certificate pinning with GnuTLS5.9 MediumcurlUbuntuwcurl path traversal with percent-encoded slashes4.6 MediumcurlUbuntucurl regressionNo scorecurlUbuntupredictable WebSocket mask5.3 MediumcurlUbuntuOut of bounds read for cookie path7.5 HighcurlUbuntunetrc and default credential leak3.4 LowcurlUbuntunetrc and redirect credential leak3.4 LowcurlUbuntuHSTS subdomain overwrites parent cache entry6.5 MediumcurlUbuntuOCSP stapling bypass with GnuTLS6.5 MediumcurlUbuntuASN.1 date parser overread6.5 MediumcurlUbuntuHTTP/2 push headers memory-leak8.6 HighcurlUbuntuUsage of disabled protocol3.5 LowcurlUbuntuOCSP verification bypass with TLS session reuse5.3 MediumcurlUbuntuWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlUbuntuThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlUbuntucurl vulnerabilitiesNo scorecurlUbuntuThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlUbuntuThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlUbuntuWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlUbuntucurl regressionNo scorecurlUbuntuAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlUbuntuAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlUbuntuAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlUbuntuAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlUbuntuAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumcurlUbuntuA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlUbuntuA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlUbuntuAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlUbuntuA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlUbuntuA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlUbuntuA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlUbuntuA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlUbuntuIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlUbuntucurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlUbuntuWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlUbuntuWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlUbuntuWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlUbuntuWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlUbuntucurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlUbuntuA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlUbuntulibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlUbuntulibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 High- Show moreLoading…