curl vulnerabilities (openSUSE)
208 vulnerabilities.
curlopenSUSElibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 HighcurlopenSUSElibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 MediumcurlopenSUSECurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...4.4 MediumcurlopenSUSEA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...4.3 MediumcurlopenSUSECurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...4.3 MediumcurlopenSUSEcurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...7.5 HighcurlopenSUSECurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...9.8 CriticalcurlopenSUSEcurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...9.1 CriticalcurlopenSUSEcurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...9.8 CriticalcurlopenSUSEA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 CriticalcurlopenSUSEcurl FTP path confusion leads to NIL byte out of bounds write9.8 CriticalcurlopenSUSElibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 CriticalcurlopenSUSEcurl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ...9.8 CriticalcurlopenSUSEThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 CriticalcurlopenSUSEThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 CriticalcurlopenSUSEAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 CriticalcurlopenSUSElibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 HighcurlopenSUSEcurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 MediumcurlopenSUSEWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 MediumcurlopenSUSEWhen asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data...6.5 MediumcurlopenSUSEIn curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic...5.3 MediumcurlopenSUSEIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session...4.8 MediumcurlopenSUSEcurl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks...4.3 MediumcurlopenSUSEcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...6.5 MediumcurlopenSUSEcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 MediumcurlopenSUSEcurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 MediumcurlopenSUSEcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 MediumcurlopenSUSEA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 LowcurlopenSUSEThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 LowcurlopenSUSEThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 MediumcurlopenSUSEThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 MediumcurlopenSUSEThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 MediumcurlopenSUSEThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 MediumcurlopenSUSEThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 LowcurlopenSUSEA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 LowcurlopenSUSEA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 MediumcurlopenSUSEMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 CriticalcurlopenSUSEThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 HighcurlopenSUSEThe smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB...6.4 MediumcurlopenSUSEcURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a...5.0 MediumcurlopenSUSEThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...7.5 HighcurlopenSUSEThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...9.0 HighcurlopenSUSECRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...4.3 MediumcurlopenSUSEcURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set...5.0 MediumcurlopenSUSEcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,...5.0 MediumcurlopenSUSEThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...5.0 MediumcurlopenSUSEcURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...5.0 MediumcurlopenSUSEcURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...5.0 MediumcurlopenSUSEcURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for...5.8 MediumcurlopenSUSEThe default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3)...6.4 Medium- Show moreLoading…