Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

curl: POST following PUT confusion

A vulnerability was found in curl. The issue occurs when doing HTTPS transfers, where curl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set if it previously used the same handle to issue a PUT request which us...

curl: HTTP multi-header compression denial of service

A flaw was found in the Curl package. A malicious server can insert an unlimited number of compression steps. This decompression chain could result in out-of-memory errors...

RHEL 9 : curl (RHSA-2023:4139)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4139 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-2350)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when listed as 'Subjec...

curl: CVE-2023-38039: HTTP header allocation DOS

A vulnerability was discovered in curl that allowed an attacker to cause a denial-of-service DOS condition on a user's system. By setting up a malicious HTTP server and continuously sending new headers, the attacker could exhaust system resources, leading to system instability or crash. The issue...

PT-2023-5211 · Curl +6 · Curl +6

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.4.0 Description: The issue is related to the handling of HTTP headers by the curl utility. When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl header...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2350)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0049

Updates of 'redis', 'kubernetes', 'calico', 'curl', 'podman', 'flannel' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-0049

Updates of 'curl', 'redis', 'podman', 'flannel', 'kubernetes', 'calico' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0426

Updates of 'git-lfs', 'curl', 'binutils-aarch64-linux-gnu', 'binutils' packages of Photon OS have been released...

The vulnerability of the cURL command-line utility relates to errors in the certificate validation process when substituting characters in TLS certificates for IDN names. This vulnerability allows a attacker to perform a “man-in-the-middle” attack.

The vulnerability of the cURL command-line utility is related to errors in the certificate validation process when comparing substitute characters in TLS certificates for IDN names. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the cURL command-line utility, related to uncontrolled resource consumption, allows a hacker to disclose protected information.

The vulnerability of the cURL command-line utility is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2328)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2308)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the update function in NETGEAR RAX50 integrated software allows a hacker to execute arbitrary code.

The vulnerability of the update function in NETGEAR RAX50 integrated software lies in errors in the certificate validation process. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted CURL POST request...

The vulnerability of the alarm() and siglongjmp() functions in the command-line utility cURL allows a hacker to trigger a service failure.

The vulnerability of the alarm and siglongjmp functions in the command-line utility cURL is related to improper synchronization during the resolution of host names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2023-2308)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used as a prefix in...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2023-2328)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used as a prefix in...