10750 matches found
CVE-2020-19909
Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
Integer overflow
Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
UBUNTU-CVE-2020-19909
DISPUTED Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
Advisory ROSA-SA-2023-2221
Software: curl 7.61.1 OS: ROSA Virtualization 2.1 packageevrstring: curl-7.61.1-30.rv3.2c.src.rpm CVE-ID: CVE-2022-32206 BDU-ID: 2022-06918 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the CURL server communication software tool is related to the allocation of unlimited memory. Exploitation of...
Advisory ROSA-SA-2023-2220
Software: curl 7.61.1 OS: ROSA Virtualization 2.1 packageevrstring: curl-7.61.1-30.rv3.2c.src.rpm CVE-ID: CVE-2022-22576 BDU-ID: 2022-03036 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the OAUTH2 protocol implementation of the cURL command line utility is related to the reuse of a connection wi...
CVE-2020-19909
Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
CVE-2020-19909
CVE-2020-19909 describes an integer overflow in curl’s code path when a user sets a very large --retry-delay, due to an overflow in tool_operate.c. The description notes that most parties report this has no direct security impact for curl users, but it could in theory cause a denial of service to...
CVE-2020-19909
Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
curl 输入验证错误漏洞
curl is a tool for transferring data from or to a server. An input validation error vulnerability exists in curl version 7.65.2, which stems from an integer overflow in tooloperate.c. The vulnerability is caused by an integer overflow in tooloperate.c...
CVE-2020-19909
Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may in theory cause a denial of service to associated systems or networks if, for example,...
EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
Exploit Title: EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download Exploit Author: LiquidWorm Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L Product web page: https://www.eurotel.it | https://www.siel.fm Affected version: v01c01 Microprocessor: socs0t10/ats01s01, Model:...
CVE-2023-28319 affecting package curl for versions less than 8.2.1-1
CVE-2023-28319 affecting package curl for versions less than 8.2.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-32001 affecting package curl for versions less than 8.2.1-1
CVE-2023-32001 affecting package curl for versions less than 8.2.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-28320 affecting package curl for versions less than 8.2.1-1
CVE-2023-28320 affecting package curl for versions less than 8.2.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-28321 affecting package curl for versions less than 8.2.1-1
CVE-2023-28321 affecting package curl for versions less than 8.2.1-1. An upgraded version of the package is available that resolves this issue...
curl: more POST-after-PUT confusion
A use-after-free flaw was found in the Curl package. This issue may lead to unintended information disclosure by the application...
curl: use after free in SSH sha256 fingerprint check
A use-after-free flaw was found in the Curl package. This flaw risks inserting sensitive heap-based data into the error message that users might see or is otherwise leaked and revealed...
curl: IDN wildcard match may lead to Improper Cerificate Validation
A flaw was found in the Curl package. An incorrect International Domain Name IDN wildcard match may lead to improper certificate validation...
curl: use after free in SSH sha256 fingerprint check
A use-after-free flaw was found in the Curl package. This flaw risks inserting sensitive heap-based data into the error message that users might see or is otherwise leaked and revealed...