12809 matches found
CVE-2024-2466 vulnerabilities
Vulnerabilities for packages: curl...
AZL-37114 CVE-2024-2004 affecting package mysql for versions less than 8.0.40-1
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
AZL-37078 CVE-2024-2398 affecting package curl for versions less than 8.8.0-1
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit 1000, libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead lea...
AZL-37087 CVE-2024-2004 affecting package cmake for versions less than 3.30.3-2
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
CVE-2024-2379 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-2398 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-2004 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-2379 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-2398 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-2466 vulnerabilities
Vulnerabilities for packages: curl...
CURL-CVE-2024-2004 Usage of disabled protocol
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
Usage of disabled protocol
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
CVE-2024-2004
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
CVE-2024-2004 Usage of disabled protocol
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
CVE-2024-2004
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
CVE-2024-2004
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
UBUNTU-CVE-2024-2004
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been...
Curl security vulnerabilities
Curl is a tool for transferring data from or to a server. A security vulnerability exists in Curl versions 7.44.0 through 8.6.0 that stems from allowing HTTP/2 pushes. libcurl aborts server pushes when the number of received push headers exceeds the maximum allowable limit 1000, which, when...
Curl security vulnerabilities
Curl is a tool for transferring data from or to a server. A security vulnerability exists in Curl versions 8.5.0 through 8.6.0 that stems from bypassing TLS certificate checking when using mbedTLS...
curl security vulnerabilities
curl is a tool used to transfer data from or to a server. A security vulnerability exists in curl versions 7.85.0 through 8.6.0 that stems from a logic error in the delete protocol that misinterprets input...