20 matches found
BIT-MARIADB-2026-44170 MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP...
curl: Heap-OOB read in urlapi `redirect_url()` via `CURLU_GUESS_SCHEME` + `CURLU_NO_GUESS_SCHEME` flow
Hi all, We've found an issue in lib/urlapi.c where redirecturl reads past the end of a heap buffer when the source URL it operates on lacks a "scheme://" prefix. This is reachable through documented public APIs curlurlset when the caller mixes CURLUGUESSSCHEME with a subsequent CURLUNOGUESSSCHEME...
JLSEC-2026-389
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...
Azure Linux 3.0 Security Update: cmake / curl (CVE-2024-6874)
The version of cmake / curl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6874 advisory. - libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a...
EUVD-2019-15025
Malware in sbrugna...
The vulnerability of the curl_url_get() function in the command-line utility cURL allows a attacker to cause a service failure.
The vulnerability of the curlurlget function in the command-line utility cURL is related to the release of previously unallocated memory due to the use of the Punycode method for converting IDN domains. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
SUSE CVE-2024-6874
libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...
AZL-49664 CVE-2024-6874 affecting package cmake for versions less than 3.30.3-2
libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...
PT-2024-5390
Name of the Vulnerable Software and Affected Versions cURL affected versions not specified Description The issue is related to the curl url get function in the cURL utility, which is used for Punycode conversions of IDN domains. When a name exactly 256 bytes is converted, it can cause the functio...
Design/Logic Flaw
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...
CVE-2022-27780
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...
OSV-2021-1793 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...
PT-2022-36639
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...
PT-2021-27985
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash involves the functions seturl, parseurl, and curl url set. Recommendations At the moment,...
PT-2021-27977
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...
PT-2021-27968
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ. The crash state involves functions such as seturl,...
The vulnerability of the curl_url_set() function in the libcurl library allows a hacker to trigger a service failure.
The vulnerability of the curlurlset function in the libcurl library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
DEBIAN-CVE-2019-5435
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1...
PT-2019-2327
Name of the Vulnerable Software and Affected Versions libcurl versions 7.62.0 through 7.64.1 Description The issue is related to an integer overflow in the curl url set function of the libcurl library. This overflow can lead to a buffer overflow, potentially allowing a remote attacker to cause a...
Fedora 18 : dracut-024-5.git20121019.fc18 (2012-16448)
fixed ifup exit code - fixed default 'rd.auto' parameter setting - only 'warn' not 'error', if we don't strip the initramfs - do not overwrite ifcfg from anaconda - ssh-client module fixes - strip binaries in the initramfs by default now - fixes for systemd and crypto - new dracut kernel command...