PT-2020-3019

Name of the Vulnerable Software and Affected Versions curl versions 7.62.0 through 7.70.0 Description The issue is related to errors in handling credentials, which can lead to a partial password being leaked over the network and to the DNS servers. This occurs when libcurl is tricked into...

PT-2016-7523

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.51.0 Description The base64 encode function in curl is prone to a buffer being under allocated in 32-bit systems if it receives a large input, at least 1Gb, via CURLOPT USERNAME. This issue occurs due to the...