CLSA-2022-1656961923 Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

CLSA-2022-1656961578 Fixed CVE-2022-27782 in curl

CVE-2022-27782: add missing checks of ssl and ssh options during matching a connection for reuse...

FreeBSD : mediawiki -- multiple vulnerabilities (5ab54ea0-fa94-11ec-996c-080027b24e86)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5ab54ea0-fa94-11ec-996c-080027b24e86 advisory. - A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...

Fedora: Security Advisory for curl (FEDORA-2022-8bd3bf5b40)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-27779 affecting package curl for versions less than 7.83.1-1

CVE-2022-27779 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27780 affecting package curl for versions less than 7.83.1-1

CVE-2022-27780 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27778 affecting package curl for versions less than 7.83.1-1

CVE-2022-27778 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

Privilege Escalation

curl is vulnerable to Privilege Escalation. The vulnerability exists due to the unpreserved file permissions in the library which will accidentally widen the permissions for the target file leaving the updated file accessible to more users than intended...

Denial Of Service (DoS)

curl is vulnerable to denial of service attacks. A malicious user is able to cause an application crash via serving excessive amounts of set-cookie headers in a HTTP response to curl...

USN-5499-1: curl vulnerabilities

Florian Kohnhuser discovered that curl incorrectly handled returning a TLS server’s certificate chain details. A remote attacker could possibly use this issue to cause curl to stop responding, resulting in a denial of service. CVE-2022-27781 Harry Sintonen discovered that curl incorrectly handled...

[SECURITY] Fedora 36 Update: curl-7.82.0-6.fc36

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

curl: credential leak on redirect

A vulnerability was found in curl. This security flaw allows leaking credentials to other servers when it follows redirects from auth-protected HTTPS URLs to other protocols and port numbers...

curl: auth/cookie leak on redirect

A vulnerability was found in curl. This security flaw allows leak authentication or cookie header data on HTTP redirects to the same host but another port number. Sending the same set of headers to a server on a different port number is a problem for applications that pass on custom Authorization...

curl: OAUTH2 bearer bypass in connection re-use

A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials set for this transfer. This issue leads to an authentication bypass, either by mistake or by a malicious...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

curl: TLS and SSH connection too eager reuse

A vulnerability was found in curl. This issue occurs because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should have prohibited reuse. This flaw leads to an authentication bypass, either by mistake or by a malicious actor...