10857 matches found
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2446-1)
This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE SLES12 Security Update : curl (SUSE-SU-2020:2444-1)
This update for curl fixes the following issues : An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
[SECURITY] Fedora 31 Update: curl-7.66.0-3.fc31
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Remote Code Execution (RCE)
pivideorecording is vulnerable to remote code execution RCE. Lack of input validation allows an attacker to execute malicious code via the /api/record/start endpoint and by creating a file in the /tmp/ using curl -POST -H "Content-Type: application/json" -d '"filename": " || touch /tmp/worked;"'...
SUSE-SU-2020:14481-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE-SU-2020:2446-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE-SU-2020:2445-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
SUSE-SU-2020:2444-1 Security update for curl
This update for curl fixes the following issues: - An application that performs multiple requests with libcurl's multi API and sets the 'CURLOPTCONNECTONLY' option, might in rare circumstances experience that when subsequently using the setup connect-only transfer, libcurl will pick and use the...
OracleVM 3.4 : curl (OVMSA-2020-0035)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix TFTP small blocksize heap buffer overflow 462 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers - CVE-2016-8616 case insensitive password comparison -...
EulerOS 2.0 SP5 : curl (EulerOS-SA-2020-1935)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl can be tricked my a malicious server to overwrite a local file when using -J --remote-header-name and -i --head in the same command...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1907)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1842)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2020-1907)
According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options...
EulerOS 2.0 SP8 : curl (EulerOS-SA-2020-1842)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Expired pointer dereference via multi API with CURLOPTCONNECTONLY option setCVE-2020-8231 Note that Tenable Network Security has extracted the...
Fedora: Security Advisory for curl (FEDORA-2020-da832cb434)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: curl-7.69.1-5.fc32
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Fedora 32 : curl (2020-da832cb434)
fix expired pointer dereference via multi API with CURLOPTCONNECTONLY option set CVE-2020-8231 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
USN-4466-2: curl vulnerability
USN-4466-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPTCONNECTONLY option. This could result in data being sent to the wrong destination,...
USN-4466-2 curl vulnerability
USN-4466-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPTCONNECTONLY option. This could result in data being sent to the wrong destination,...
