12808 matches found
openSUSE Security Advisory (SUSE-SU-2024:1151-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:1151-3 Security update for curl
This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. bsc1221665 - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. bsc1221667...
SUSE-SU-2024:1151-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. bsc1221665 - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. bsc1221667...
SUSE-SU-2024:1150-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. bsc1221665 - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. bsc1221667...
cURL TLS Spoofing
The vulnerability of TLS protocols HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. implemented by the command-line utility cURL is related to improper authentication of certificates. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
CURL vquic-tls.c Function Heap Buffer Overflow DoS
The vulnerability of the curlwsslinitctx function in the vquic-tls.c component of the command-line utility CURL is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to bypass any certificate-related issues...
cURL Protocol Deletion Access Information Disclosure
The vulnerability of the cURL command-line utility is related to errors in the logic of protocol deletion. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...
cURL HTTP/2 DoS
The vulnerability of the HTTP/2 command-line utility implementation in CURL is related to memory leak errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Certificate Validation
curl is vulnerable to Certificate Validation. The vulnerability is due to a flaw in libcurl when built with wolfSSL and the error path inadvertently bypassing certificate verification when encountering unknown or bad ciphers or curves, allows for certificate verification to be skipped for QUIC...
Logic Error
curl is vulnerable to Logic Error. The vulnerability is due to an error in the logic for removing protocols when a protocol selection parameter option disables all protocols without adding any, allows attackers to potentially bypass protocol restrictions and perform requests with disabled protoco...
RLSA-2024:1601 Moderate: curl security and bug fix update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: information disclosure by exploiting a mixed case flaw CVE-2023-46218 curl: more POST-after-PUT confusion...
curl security and bug fix update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...
SUSE-SU-2024:1120-1 Security update for curl
This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. bsc1221665 - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. bsc1221667...
Rocky Linux 8 : curl (RLSA-2024:1601)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1601 advisory. - An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback...
Mageia: Security Advisory (MGASA-2024-0099)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability in libcurl may affect IBM Storage Scale System (CVE-2023-28322)
Summary A vulnerability in libcurl may allow a remote attacker to bypass security restrictions in IBM Storage Scale System. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2023-28322 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass security restrictions...
Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2024-581)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-581 advisory. A flaw was found in Curl, where it inadvertently kept the SSL session ID for connections in its cache even when the verify status, OCSP stapling test, failed. A subsequent transfer to the same hostname...
AlmaLinux 8 : curl (ALSA-2024:1601)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1601 advisory. - An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback...
Moderate: Red Hat Security Advisory: curl security and bug fix update
An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...