Skip to contentHaxx Curl vulnerabilities
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...CVE-2021-22898Fix available3.1 Low
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- haxx libcurl, debian linux, oracle communications cloud native core policy +5 more +7 moreDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...CVE-2020-8231Fix available7.5 High
- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...CVE-2020-8177Fix available7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...CVE-2020-8169Fix available7.5 High
- curlCurl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local...CVE-2016-46069.8 Critical
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...CVE-2019-54437.8 High
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...CVE-2019-5435Fix available3.7 Low
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...CVE-2018-16842Fix available4.4 Medium
- curl, canonical ubuntu linux +1 moreA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...CVE-2018-16840Fix available4.3 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...CVE-2018-16839Fix available4.3 Medium
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- haxx curl, canonical ubuntu linux +1 moreCurl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based...CVE-2018-0500Fix available9.8 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- haxx curl, canonical ubuntu linux +1 morecurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...CVE-2018-1000300Fix available9.8 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...CVE-2018-1000122Fix available9.1 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...CVE-2018-1000121Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120Fix availableEPSS 11.6%9.8 Critical
- curlcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...CVE-2017-2628Fix available9.8 Critical
- haxx curl, canonical ubuntu linux, debian linux +11 more +13 morelibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...CVE-2018-1000007Fix available9.8 Critical
- haxx libcurl, canonical ubuntu linux, debian linux +2 morelibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...CVE-2018-1000005Fix available9.1 Critical
- haxx curl, libcurl +1 morecurl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ...CVE-2017-8818Fix available9.8 Critical
- haxx curl, libcurl, debian linux +2 moreThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...CVE-2017-8817Fix availableEPSS 11.2%9.8 Critical
- haxx curl, libcurl, debian linux +2 moreThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...CVE-2017-8816Fix available9.8 Critical
- Show moreLoading…