The curl Project

17 results · Feed

• Medium 5.4
  CVE-2018-16890 Public exploit

  libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

  The curl Project curl curl curl Debian Ubuntu Alpine
  Feb 6, 2019
• High 7.1
  CVE-2019-3822 EPSS 13%

  libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Feb 6, 2019
• Medium 4.3
  CVE-2019-3823

  libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Feb 6, 2019
• Medium 4.4
  CVE-2018-16842

  Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Oct 31, 2018
• Medium 4.3
  CVE-2018-16840

  A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy…

  The curl Project curl curl curl Debian Alpine
  Oct 31, 2018
• Medium 4.3
  CVE-2018-16839

  Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Oct 31, 2018
• Medium 5.3
  CVE-2016-8615

  A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Low 3.7
  CVE-2016-8616

  A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons …

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Medium 5.3
  CVE-2016-8625

  curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead user…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Low 3.3
  CVE-2016-8623

  A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-aft…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Medium 5.3
  CVE-2016-8619

  The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Medium 6.5
  CVE-2016-8620

  The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read v…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Aug 1, 2018
• Low 3.3
  CVE-2016-8617

  The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Jul 31, 2018
• Medium 5.3
  CVE-2016-8621

  The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an inpu…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Jul 31, 2018
• Medium 5.3
  CVE-2016-8624

  curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Jul 31, 2018
• Medium 5.3
  CVE-2016-8618

  The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to …

  The curl Project curl curl curl Debian Ubuntu Alpine
  Jul 31, 2018
• Low 3.7
  CVE-2016-8622

  The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if t…

  The curl Project curl curl curl Debian Ubuntu Alpine
  Jul 31, 2018