72 matches found
openSUSE: Security Advisory for curl (openSUSE-SU-2020:1345-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2445-1)
This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2446-1)
This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE SLES12 Security Update : curl (SUSE-SU-2020:2444-1)
This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
Fedora 31 : curl (2020-126a0dd319)
fix expired pointer dereference via multi API with CURLOPTCONNECTONLY option set CVE-2020-8231 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
SUSE-SU-2020:2446-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE-SU-2020:2444-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1842)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : curl (EulerOS-SA-2020-1842)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Expired pointer dereference via multi API with CURLOPTCONNECTONLY option setCVE-2020-8231 Note that Tenable Network Security has extracted the...
FreeBSD : curl -- expired pointer dereference vulnerability (b905dff4-e227-11ea-b0ea-08002728f74c)
curl security problems : CVE-2020-8231: wrong connect-only connection An application that performs multiple requests with libcurl's multi API and sets the CURLOPTCONNECTONLY option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will...
Photon OS 3.0: Curl PHSA-2020-3.0-0129
An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0129. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139729;...
[slackware-security] curl
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.72.0-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: libcurl: wrong connect-only connection 98 F...
CVE-2020-8231
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data...
UBUNTU-CVE-2020-8231
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data...
CVE-2019-8231
In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification...
CVE-2019-8231
In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification...
CVE-2019-8231
CVE-2019-8231 affects Magento up to 1.9.4.3 and Magento prior to 1.14.4.3. An authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification, enabling remote code execution. The issue is caused by improper handling of att...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2019-6772
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2019-6772
Foxit Reader (version 2019.010.20098) is affected by CVE-2019-6772 via the removeField method in AcroForms, where the code fails to validate object existence before operations. This can lead to information disclosure and, when combined with other vulnerabilities, potential code execution in the p...