12914 matches found
curl: curl: Information disclosure via incorrect Digest authentication header reuse
A flaw was found in curl. When libcurl performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This...
curl: curl: Information disclosure via incorrect .netrc password lookup
A flaw was found in curl. When curl is configured to use a .netrc file for credentials and a URL is provided with a username but no password, curl may incorrectly retrieve and use the password for a different user from the .netrc file for the same host. This could lead to unauthorized information...
Important: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ROS-20260921-73-0135
The vulnerability in curl is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260921-73-0030
The vulnerability in curl is related to incorrect verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
ROS-20260921-73-0037
The vulnerability in curl is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...
Oracle Linux 9 : curl (ELSA-2026-69126)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69126 advisory. - add sasl service name to connection reuse checks CVE-2026-8458 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 10 : curl (RHSA-2026:69125)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69125 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...
SUSE SLES15 Security Update : curl (SUSE-SU-2026:4047-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4047-1 advisory. - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. -...
Critical Photon OS Security Update - PHSA-2026-5.0-91-1008
Updates of 'curl', 'linux-esx', 'linux' packages of Photon OS have been released...
VulnCheck KEV: CVE-2021-30134
php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...
RHEL 9 : curl (RHSA-2026:69126)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69126 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:4048-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4048-1 advisory. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. -...
curl security update
7.76.1-40.el98.7 - add sasl service name to connection reuse checks CVE-2026-8458 7.76.1-40.el98.6 - detect proxy changes read from environment CVE-2026-8927...
ROS-20260921-73-0032
The vulnerability in curl is related to the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20260921-73-0036
The vulnerability in curl is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2026-3830)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even...
ALSA-2026:69125 Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information...
ALSA-2026:69126 Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to...