curl vulnerabilities (openSUSE)
208 vulnerabilities.
curlopenSUSEA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighcurlopenSUSEA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighcurlopenSUSEAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumcurlopenSUSEA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumcurlopenSUSEA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalcurlopenSUSEA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumcurlopenSUSEA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighcurlopenSUSEcurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...6.5 MediumcurlopenSUSEIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighcurlopenSUSEcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighcurlopenSUSEWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalcurlopenSUSEWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowcurlopenSUSEWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumcurlopenSUSEWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalcurlopenSUSEcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumcurlopenSUSEA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumcurlopenSUSEUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 MediumcurlopenSUSElibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 MediumcurlopenSUSEA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 HighcurlopenSUSElibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighcurlopenSUSElibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighcurlopenSUSEThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighcurlopenSUSEA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumcurlopenSUSEAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighcurlopenSUSEAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumcurlopenSUSEAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 HighcurlopenSUSEWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...5.9 MediumcurlopenSUSEA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...7.5 HighcurlopenSUSEWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...9.1 CriticalcurlopenSUSEWhen curl is instructed to get content using the metalink feature, and a user name and password...5.3 MediumcurlopenSUSEWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 MediumcurlopenSUSEcurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...5.3 MediumcurlopenSUSElibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...3.7 LowcurlopenSUSEcurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 HighcurlopenSUSEcurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 LowcurlopenSUSEcurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 LowcurlopenSUSEcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 MediumcurlopenSUSEThere is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain...6.5 MediumcurlopenSUSEcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 HighcurlopenSUSEcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 HighcurlopenSUSEA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 LowcurlopenSUSEDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...7.5 HighcurlopenSUSEcurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...7.8 HighcurlopenSUSEcurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 HighcurlopenSUSECURL before 7.68.0 lacks proper input validation, which allows users to create a `FILE:` URL that...No scorecurlopenSUSEHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 CriticalcurlopenSUSEDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 CriticalcurlopenSUSEAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 LowcurlopenSUSEA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 HighcurlopenSUSElibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 Medium- Show moreLoading…