222 results · Feed
-
Medium 6.5
The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read v…
-
Low 3.3
The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if…
-
Medium 5.3
The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an inpu…
-
Medium 5.3
curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with…
-
Medium 5.3
The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to …
-
Low 3.7
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if t…
-
Medium 4.3
curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the…
-
Medium 4.8
In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client ce…
-
Unscored —
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that mi…
-
Critical 9.1
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of s…
-
Unscored —
curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in d…
-
Medium 5.9
curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's imp…
-
Unscored —
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker …
-
Critical 9.8CVE-2018-1000120 EPSS 12%
curl FTP path confusion leads to NIL byte out of bounds write
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
-
Unscored —
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an atta…
-
Unscored —
libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (h…
-
Unscored —
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom head…
-
Critical 9.8
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denia…
-
Critical 9.8CVE-2017-8817 EPSS 11%
The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-o…
-
Unscored —
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access a…
-
Critical 9.1
An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the da…
-
Unscored —
libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successf…
-
Medium 6.5
curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those number…
-
Medium 6.5
When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 b…
-
Low 2.4
The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensiti…
-
Unscored —CVE-2016-7167 EPSS 12%
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape …
-
Unscored —
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote …
-
Unscored —CVE-2016-5419 EPSS 15%
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which all…
-
Unscored —CVE-2016-5420 EPSS 15%
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which mig…
-
Unscored —
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly …
-
Unscored —
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.…
-
Unscored —
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy c…
-
Unscored —
The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive …
-
Unscored —
cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when re…
-
Unscored —
The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destinatio…
-
Unscored —CVE-2015-3145 EPSS 30%
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which…
-
Unscored —CVE-2015-3144 EPSS 11%
The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows …
-
Unscored —CVE-2015-3143 EPSS 11%
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to conn…
-
Unscored —CVE-2015-3148 EPSS 14%
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …
-
Unscored —
CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attacker…