10718 matches found
Astra Linux – Vulnerability in curl
When curl is used to retrieve and parse cookies from an HTTPS server, it accepts cookies using control codes that, when sent back to an HTTP server later, may cause the server to return 400 responses. This effectively allows a “sister site” to deny service to all other sibling sites...
Astra Linux – Vulnerability in curl
There is a vulnerability in input validation in curl 8.0. During communication using the TELNET protocol, this may allow an attacker to send maliciously crafted user names and “telnet options” during server negotiation. The lack of proper input scrubbing allows an attacker to send content or...
Astra Linux – Vulnerability in curl
When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname, but the...
Astra Linux – Vulnerability in curl
There is a path traversal vulnerability in the 8.0.0 SFTP implementation of curl. This vulnerability causes the tilde character to be incorrectly replaced when used as a prefix in the first path element. Additionally, the tilde is intended to be used as the first element to indicate a path relati...
Astra Linux – Vulnerability in curl
A poorly protected credentials vulnerability exists in curl 4.9, and versions including curl 7.82.0 are also affected. This vulnerability could allow attackers to extract credentials when using HTTPS redirections with authentication. As a result, credentials may be leaked to other services that...
Astra Linux – Vulnerability in curl
There is a vulnerability in curl version 7.87.0 where it is possible to exploit the memory reclamation mechanism. In this vulnerability, curl can be instructed to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When curl...
Astra Linux – Vulnerability in curl
When the curl command is used to retrieve content using the Metalink feature, and a user name and password are used to download the Metalink XML file, those same credentials are then passed to each server from which the curl command will attempt to download or retrieve the content. This often...
Astra Linux – Vulnerability in curl
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3, or SMTP scheme, curl may incorrectly pass the bearer token to the new target host...
RHSA-2026:57462 Red Hat Security Advisory: curl security, bug fix, and enhancement update
Bulletin has no description...
curl security, bug fix, and enhancement update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...
ROOT-OS-DEBIAN-11-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-5773 CVE-2026-5773 in curl - Patched by Root
Root has patched CVE-2026-5773 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-4873 CVE-2026-4873 in curl - Patched by Root
Root has patched CVE-2026-4873 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-5545 CVE-2026-5545 in curl - Patched by Root
Root has patched CVE-2026-5545 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-23914 CVE-2023-23914 in curl - Patched by Root
Root has patched CVE-2023-23914 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-8286 CVE-2026-8286 in curl - Patched by Root
Root has patched CVE-2026-8286 in the curl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-9681 CVE-2024-9681 in curl - Patched by Root
Root has patched CVE-2024-9681 in the curl package for Root:Debian:11. Multiple fixed versions available...