SUSE CVE-2019-3823

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtpendofresp isn't NUL terminated and contains no character ending the parsed number, and len is set to 5, then the strtol call rea...

CLSA-2022-1671126165 curl: Fix of CVE-2022-32221

CVE-2022-32221: fix issue when POST following PUT confusion...

CLSA-2022-1663183179 Fixed CVEs in curl: CVE-2022-32208, CVE-2022-32206

CVE-2022-32208: krb5: fix returning error on decode errors - CVE-2022-32206: contentencoding: return error on too many compression steps - fix a curl.spec's comment about applying TuxCare ELS patches - improve the test system by repeating failed tests several times...

CVE-2021-24910

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action available to both unauthenticated and authenticated users when the curl library is installed before outputting it back in the response, leading to a Reflected Cross-Si...

CVE-2021-24910

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action available to both unauthenticated and authenticated users when the curl library is installed before outputting it back in the response, leading to a Reflected Cross-Si...

CLSA-2022-1658856012 Fixed CVEs in curl: CVE-2022-27776, CVE-2022-27774

CVE-2022-27774: fix credential leak on redirect - CVE-2022-27776: fix auth/cookie leak on redirect...

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

...

Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System

Summary The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security vulnerabilities have been discovered in libcurl used with IBM Security Network Intrusion Prevention System. Vulnerability...

CLSA-2021-1634922397 Fixed CVE-2020-8284 in curl

trusting FTP PASV responses CVE-2020-8284...

PT-2021-15278 · Mysql Server +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: libcurl versions prior to 7.77.0 MySQL Server versions 5.7.35 and earlier, 8.0.26 and earlier Description: The issue arises when libcurl-using applications request a specific client certificate for a transfer using the CURLOPT SSLCERT option...

CVE-2021-22901

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly,...

Due to use of a dangling pointer libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

...

The vulnerability of the libcurl library, related to improper code generation, allows attackers to escalate their privileges or execute arbitrary code.

The vulnerability of the libcurl library is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

Haxx libcurl Double Release Vulnerability

Haxx libcurl is an open source client-side URL transport library from the Swedish company Haxx. It supports protocols such as FTP, SFTP, TFTP and HTTP. A double-release vulnerability exists in Haxx libcurl versions 7.52.0 through 7.65.3, which can be exploited by an attacker to cause a denial of...

TFTP small blocksize heap buffer overflow

libcurl contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It can call recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is controlled b...

curl: Incorrect IPv6 literal parsing leads to validated connection to unexpected https server.

Summary: The IPv6 ip address can be specified with square brackets like fe80::3. There can also be a zone id specified like fe80::3%15. A URL can specify its hostname with IPv6 literal, It seems that the parsing in curl library is not complete. For instance, it is possible for particular IPv6...

curl: LDAP NULL pointer dereference

A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldapgetattributeber function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply...

The vulnerability of the tftp_receive_packet function in the libcurl library, which relates to writing beyond the buffer boundary, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tftpreceivepacket function in the libcurl library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Debian DLA-1804-1 : curl security update

cURL, an URL transfer library, contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It calls recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap...

The vulnerability of the ntlmdecode_type2_target function in the libcurl library, which allows a hacker to cause a service failure

The vulnerability of the ntlmDecodeType2target function lib/vauth/ntlm.c in the curl library is caused by a numerical overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...