Lucene search
+L

10718 matches found

OpenVAS
OpenVAS
added 2013/06/27 12:00 a.m.33 views

CentOS Update for curl CESA-2013:0983 centos5

Check for the Version of curl OpenVAS Vulnerability Test CentOS Update for curl CESA-2013:0983 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.8CVSS6.1AI score0.11118EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2013/06/27 12:00 a.m.23 views

CentOS Update for curl CESA-2013:0983 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7AI score0.11118EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2013/06/27 12:00 a.m.18 views

RedHat Update for curl RHSA-2013:0983-01

Check for the Version of curl OpenVAS Vulnerability Test RedHat Update for curl RHSA-2013:0983-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

6.8CVSS6.1AI score0.11118EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2013/06/27 12:00 a.m.24 views

CentOS 5 / 6 : curl (CESA-2013:0983)

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

6.8CVSS7.5AI score0.11118EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2013/06/27 12:00 a.m.29 views

RedHat Update for curl RHSA-2013:0983-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.11118EPSS
SaveExploits2References2
OSV
OSV
added 2013/06/26 6:44 p.m.11 views

MGASA-2013-0188 Updated curl packages fix CVE-2013-2174

libcurl is vulnerable to a case of bad checking of the input data which may lead to heap corruption. The function curleasyunescape decodes URL encoded strings to raw binary data. URL encoded octets are represented with %HH combinations where HH is a two-digit hexadecimal number. The decoded strin...

6.8CVSS6.1AI score0.11118EPSS
SaveExploits2References3
Cent OS
Cent OS
added 2013/06/26 2:20 a.m.70 views

curl, libcurl security update

CentOS Errata and Security Advisory CESA-2013:0983 Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

6.8CVSS7.1AI score0.11118EPSS
SaveExploits2References7
seebug.org
seebug.org
added 2013/06/26 12:00 a.m.69 views

cURL/libcURL 'curl_easy_unescape()'堆内存破坏漏洞

BUGTRAQ ID: 60737 CVECAN ID: CVE-2013-2174 cURL是命令行传输文件工具,支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 cURL 7.7 - 7.30.0版本内的函数"curleasyunescape"lib/escape.c将URL编码的字符串解码为原始二进制数据时出现边界错误,此漏洞可被利用造成堆缓冲区溢出,导致任意代码执行。 0 cURL 7.x 临时解决方法: 建议您采取以下措施以降低威胁: 升级到curl/libcurl 7.31.0 应用补丁,重建libcurl...

6.8CVSS0.5AI score0.11118EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/06/26 12:00 a.m.22 views

RHEL 5 / 6 : curl (RHSA-2013:0983)

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

6.8CVSS7.5AI score0.11118EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2013/06/25 7:14 p.m.8 views

curl: Loop counter error, leading to heap-based buffer overflow when decoding certain URLs

Heap-based buffer overflow in the curleasyunescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted string ending in a "%" percent character...

6.8CVSS7.3AI score0.11118EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2013/06/25 7:14 p.m.39 views

Moderate: Red Hat Security Advisory: curl security update

Updated curl packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

6.8CVSS7.1AI score0.11118EPSS
SaveExploits2References3
Oracle linux
Oracle linux
added 2013/06/25 12:00 a.m.41 views

curl security update

7.19.7-37 - fix heap-based buffer overflow in curleasyunescape CVE-2013-2174...

6.8CVSS3.2AI score0.11118EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/06/25 12:00 a.m.51 views

Debian DSA-2713-1 : curl - heap overflow

Timo Sirainen discovered that cURL, an URL transfer library, is prone to a heap overflow vulnerability due to bad checking of the input data in the curleasyunescape function. The curl command line tool is not affected by this problem as it doesn't use the curleasyunescape function. %NASLMINLEVEL...

6.8CVSS7.1AI score0.11118EPSS
SaveExploits2References4
Debian
Debian
added 2013/06/24 9:18 p.m.28 views

[SECURITY] [DSA 2713-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2713-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 24, 2013 http://www.debian.org/security/faq -...

6.8CVSS1.7AI score0.11118EPSS
SaveExploits2
Debian
Debian
added 2013/06/24 9:18 p.m.41 views

[SECURITY] [DSA 2713-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2713-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 24, 2013 http://www.debian.org/security/faq -...

6.8CVSS5.2AI score0.11118EPSS
SaveExploits2
OSV
OSV
added 2013/06/24 12:00 a.m.20 views

DSA-2713-1 curl - heap overflow

Bulletin has no description...

6.8CVSS6.2AI score0.11118EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2013/06/24 12:00 a.m.34 views

Debian Security Advisory DSA 2713-1 (curl - heap overflow)

Timo Sirainen discovered that cURL, an URL transfer library, is prone to a heap overflow vulnerability due to bad checking of the input data in the curleasyunescape function. The curl command line tool is not affected by this problem as it doesn't use the curleasyunescape function. OpenVAS...

6.8CVSS6.3AI score0.11118EPSS
SaveExploits2References1
ALT Linux
ALT Linux
added 2013/06/24 12:00 a.m.43 views

Security fix for the ALT Linux 6 package curl version 7.24.0-alt1.M60P.1

June 24, 2013 Anton Farygin 7.24.0-alt1.M60P.1 - CVE-2013-2174 fixed curleasyunescape may parse data beyond the end of the input buffer...

6.8CVSS7.6AI score0.11118EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/06/24 12:00 a.m.27 views

FreeBSD : cURL library -- heap corruption in curl_easy_unescape (01cf67b3-dc3b-11e2-a6cd-c48508086173)

cURL developers report : libcurl is vulnerable to a case of bad checking of the input data which may lead to heap corruption. The function curleasyunescape decodes URL-encoded strings to raw binary data. URL-encoded octets are represented with %HH combinations where HH is a two-digit hexadecimal...

6.8CVSS7.3AI score0.11118EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2013/06/24 12:00 a.m.19 views

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : curl (SSA:2013-174-01)

New curl packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-174-01. The tex...

6.8CVSS7AI score0.11118EPSS
SaveExploits2References2
Rows per page
Query Builder