Haxx Libcurl vulnerabilities

• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• haxx libcurl, google nest speakers, nest mini firmware +2 more The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest... CVE-2024-32928 5.9 MediumAugust 19, 2024
• curl, haxx libcurl, siemens ruggedcom rst2428p +19 more +21 more ASN.1 date parser overread CVE-2024-7264 Fix available EPSS 20.2% 6.5 MediumJuly 31, 2024
• curl, curl libcurl +1 more macidn punycode buffer overread CVE-2024-6874 Fix available 4.3 MediumJuly 24, 2024
• curl, haxx libcurl +1 more freeing stack buffer in utf8asn1str CVE-2024-6197 Fix available 7.5 HighJuly 24, 2024
• curl, haxx libcurl, siemens ruggedcom ape1808 +3 more +5 more This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... CVE-2023-38546 Fix available 3.7 LowOctober 11, 2023
• curl, fedoraproject fedora, haxx libcurl +15 more +17 more This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... CVE-2023-38545 Public exploitFix available EPSS 78.3% 9.8 CriticalOctober 11, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 more A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ... CVE-2023-27537 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 more An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... CVE-2023-27538 Fix available 5.5 MediumMarch 20, 2023
• haxx libcurl, debian linux, fedoraproject fedora +10 more +12 more An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... CVE-2023-27536 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, debian linux, fedoraproject fedora +10 more +12 more An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... CVE-2023-27535 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, apple macos, debian linux +17 more +19 more When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances... CVE-2021-22945 Fix available 9.1 CriticalSeptember 15, 2021
• haxx libcurl, debian linux, fedoraproject fedora +33 more +35 more libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... CVE-2021-22924 Public exploitFix available 3.7 LowJuly 21, 2021
• haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 more curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to... CVE-2021-22890 Fix available 3.7 LowMarch 30, 2021
• haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 more curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information... CVE-2021-22876 Fix available 5.3 MediumMarch 30, 2021
• apple mac os x, macos, debian linux +22 more +24 more curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... CVE-2020-8285 Fix available 7.5 HighDecember 9, 2020
• apple mac os x, macos, debian linux +17 more +19 more curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to... CVE-2020-8286 Fix available 7.5 HighDecember 9, 2020
• haxx libcurl, debian linux, oracle communications cloud native core policy +5 more +7 more Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when... CVE-2020-8231 Fix available 7.5 HighAugust 19, 2020
• curl, haxx libcurl, debian linux +12 more +14 more A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in... CVE-2019-5436 Fix available EPSS 49.7% 7.8 HighMay 22, 2019
• curl, haxx libcurl, canonical ubuntu linux +5 more +7 more libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the... CVE-2019-3823 Fix available 4.3 MediumFebruary 6, 2019
• curl, haxx libcurl, oracle http server +14 more +16 more libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow.... CVE-2019-3822 Fix available EPSS 12.9% 7.1 HighFebruary 6, 2019
• curl, haxx libcurl, canonical ubuntu linux +8 more +10 more libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read.... CVE-2018-16890 Public exploitFix available 5.4 MediumFebruary 6, 2019
• [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 more curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The... CVE-2018-14618 Fix available EPSS 11.1% 7.5 HighSeptember 5, 2018
• haxx libcurl, canonical ubuntu linux, debian linux +2 more libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2... CVE-2018-1000005 Fix available 9.1 CriticalJanuary 24, 2018
• haxx curl, libcurl +1 more curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ... CVE-2017-8818 Fix available 9.8 CriticalNovember 29, 2017
• haxx curl, libcurl, debian linux +2 more The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a... CVE-2017-8817 Fix available EPSS 11.2% 9.8 CriticalNovember 29, 2017
• haxx curl, libcurl, debian linux +2 more The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows... CVE-2017-8816 Fix available 9.8 CriticalNovember 29, 2017
• haxx libcurl, debian linux +1 more An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When... CVE-2017-1000257 Fix available 9.1 CriticalOctober 23, 2017
• haxx libcurl libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an... CVE-2017-1000254 Fix available 7.5 HighOctober 4, 2017
• haxx libcurl When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ... CVE-2017-1000100 Fix available 6.5 MediumAugust 9, 2017
• haxx libcurl When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data... CVE-2017-1000099 Fix available 6.5 MediumAugust 9, 2017
• [unknown] curl, haxx libcurl +1 more In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session... CVE-2017-7468 Fix available 4.8 MediumApril 19, 2017
• curl, haxx libcurl +1 more The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`.... CVE-2016-8622 Fix available 3.7 LowNovember 2, 2016
• haxx libcurl, fedoraproject fedora +1 more Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ... CVE-2016-7167 Fix available EPSS 11.7% 9.8 CriticalSeptember 14, 2016
• haxx libcurl, opensuse leap +1 more curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at... CVE-2016-7141 Fix available 7.5 HighSeptember 7, 2016
• haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 more Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which... CVE-2016-5421 Fix available 8.1 HighAugust 3, 2016
• haxx libcurl, debian linux, opensuse leap +2 more curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS... CVE-2016-5420 Fix available EPSS 15.4% 7.5 HighAugust 3, 2016
• haxx libcurl, debian linux, opensuse leap +2 more curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate... CVE-2016-5419 Fix available EPSS 15.1% 7.5 HighAugust 3, 2016
• haxx curl, libcurl, hp system management homepage +2 more +4 more The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB... CVE-2015-3237 Fix available 6.4 MediumJune 17, 2015
• haxx curl, libcurl +1 more cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a... CVE-2015-3236 Fix available 5.0 MediumJune 17, 2015
• haxx curl, libcurl, apple mac os x +6 more +8 more The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly... CVE-2015-3145 Fix available EPSS 30.5% 7.5 HighApril 22, 2015
• haxx curl, libcurl, canonical ubuntu linux +2 more +4 more The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate... CVE-2015-3144 Fix available EPSS 10.5% 9.0 HighApril 22, 2015
• haxx libcurl, apple mac os x +1 more The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39... CVE-2014-8151 5.8 MediumJanuary 8, 2015
• haxx libcurl, canonical ubuntu linux, debian linux +2 more CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,... CVE-2014-8150 Fix available 4.3 MediumJanuary 8, 2015
• haxx libcurl, apple mac os x, canonical ubuntu linux +3 more +5 more The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the... CVE-2014-3707 Fix available 4.3 MediumNovember 5, 2014
• haxx curl, libcurl, apple mac os x +2 more cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set... CVE-2014-3620 Fix available 5.0 MediumSeptember 10, 2014
• haxx curl, libcurl, apple mac os x +2 more cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names,... CVE-2014-3613 Fix available 5.0 MediumSeptember 10, 2014
• haxx curl, libcurl, apple mac os x +3 more +5 more The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both... CVE-2015-3153 Fix available 5.0 MediumApril 15, 2014
• haxx curl, libcurl, apple mac os x +5 more +7 more cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections... CVE-2015-3148 Fix available EPSS 14.1% 5.0 MediumApril 15, 2014
• haxx curl, libcurl, apple mac os x +3 more +5 more cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows... CVE-2015-3143 Fix available EPSS 11.1% 5.0 MediumApril 15, 2014
• Show olderLoading…