Skip to content
OpenAdvisories

Vendor

curl

98 known vulnerabilities.

Products

curl 98
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • High 7.5
    CVE-2024-6197

    freeing stack buffer in utf8asn1str

    libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes `free()` on a 4 byte localstack buffer. Most modern malloc implementatio…

    curl curl curl curl Debian Azure Linux Alpine
  • High 8.6
    CVE-2024-2398 EPSS 36%

    HTTP/2 push headers memory-leak

    When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the prev…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2023-38545 Public exploit EPSS 78%

    This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2023-38039 Public exploit EPSS 56%

    When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl…

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2019-5436 EPSS 50%

    A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4…

    curl curl curl curl Debian Ubuntu Alpine