Skip to contentThe Curl Project Curl vulnerabilities
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the...CVE-2018-16842Fix available4.4 Medium
- curl, canonical ubuntu linux +1 moreA heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code...CVE-2018-16840Fix available4.3 Medium
- haxx curl, canonical ubuntu linux, debian linux +1 more +3 moreCurl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication...CVE-2018-16839Fix available4.3 Medium
- curlcurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...CVE-2016-8625Fix available5.3 Medium
- curlcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...CVE-2016-8624Fix available5.3 Medium
- curlA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...CVE-2016-8623Fix available3.3 Low
- curl, haxx libcurl +1 moreThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....CVE-2016-8622Fix available3.7 Low
- curlThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...CVE-2016-8621Fix available5.3 Medium
- curlThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...CVE-2016-8620Fix available6.5 Medium
- curlThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...CVE-2016-8619Fix available5.3 Medium
- curlThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...CVE-2016-8618Fix available5.3 Medium
- curlThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...CVE-2016-8617Fix available3.3 Low
- curlA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...CVE-2016-8616Fix available3.7 Low
- curlA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...CVE-2016-8615Fix available5.3 Medium