curl vulnerabilities (openSUSE)
208 vulnerabilities.
curlopenSUSEproxy credentials leak over redirect-to proxy5.9 MediumcurlopenSUSEwrong reuse of SMB connection7.5 HighcurlopenSUSEwrong reuse of HTTP Negotiate connection6.5 MediumcurlopenSUSEconnection reuse ignores TLS requirement5.9 MediumcurlopenSUSEcross-proxy Digest auth state leak5.3 MediumcurlopenSUSEuse after free in SMB connection reuse7.5 HighcurlopenSUSEwrong proxy connection reuse with credentials6.5 MediumcurlopenSUSEtoken leak with redirect and netrc5.3 MediumcurlopenSUSEbad reuse of HTTP Negotiate connection6.5 MediumcurlopenSUSEbroken TLS options for threaded LDAPS6.3 MediumcurlopenSUSElibssh key passphrase bypass without agent set3.1 LowcurlopenSUSElibssh global known_hosts override5.3 MediumcurlopenSUSEOpenSSL partial chain store policy bypass5.3 MediumcurlopenSUSEbearer token leak on cross-protocol redirect5.3 MediumcurlopenSUSEwcurl path traversal with percent-encoded slashes4.6 MediumcurlopenSUSEmissing SFTP host verification with wolfSSH4.3 MediumcurlopenSUSEpredictable WebSocket mask5.3 MediumcurlopenSUSEOut of bounds read for cookie path7.5 HighcurlopenSUSEWebSocket endless loop7.5 HighcurlopenSUSENo QUIC certificate pinning with wolfSSL4.8 MediumcurlopenSUSEQUIC certificate check skip with wolfSSL6.5 MediumcurlopenSUSEgzip integer overflow7.3 HighcurlopenSUSEeventfd double close7.0 HighcurlopenSUSEnetrc and default credential leak3.4 LowcurlopenSUSEnetrc and redirect credential leak3.4 LowcurlopenSUSEHSTS subdomain overwrites parent cache entry6.5 MediumcurlopenSUSEOCSP stapling bypass with GnuTLS6.5 MediumcurlopenSUSEASN.1 date parser overread6.5 MediumcurlopenSUSEmacidn punycode buffer overread4.3 MediumcurlopenSUSEfreeing stack buffer in utf8asn1str7.5 HighcurlopenSUSEcurl-7.79.1-1.1 on GA mediaNo scorecurlopenSUSETLS certificate check bypass with mbedTLS6.5 MediumcurlopenSUSEQUIC certificate check bypass with wolfSSL6.3 MediumcurlopenSUSEHTTP/2 push headers memory-leak8.6 HighcurlopenSUSEUsage of disabled protocol3.5 LowcurlopenSUSEOCSP verification bypass with TLS session reuse5.3 MediumcurlopenSUSEWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 MediumcurlopenSUSEThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumcurlopenSUSEThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowcurlopenSUSEThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalcurlopenSUSEWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 HighcurlopenSUSElibcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called...0.0 NonecurlopenSUSEA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumcurlopenSUSEAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowcurlopenSUSEAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumcurlopenSUSEA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighcurlopenSUSEA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...5.9 MediumcurlopenSUSEAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumcurlopenSUSEAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumcurlopenSUSEAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 Medium- Show moreLoading…