curl vulnerabilities (openEuler)
95 vulnerabilities.
curlopenEulerIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlopenEulercurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlopenEulerWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlopenEulerWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlopenEulerWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlopenEulerWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlopenEulercurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlopenEulerA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlopenEulerlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlopenEulerlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlopenEulerA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlopenEulerAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlopenEulerAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlopenEulerAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlopenEulerWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlopenEulerA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlopenEulerWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlopenEulerlibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 HighcurlopenEulerWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlopenEulerWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlopenEulercurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlopenEulerlibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlopenEulercurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...5.3 MediumcurlopenEulercurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlopenEulercurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlopenEulercurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlopenEulercurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlopenEulercurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlopenEulerA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlopenEulerDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 High