10812 matches found
Debian dla-3613 : curl - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3613 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3613-1 [email protected]...
The vulnerability of the implementation of the SOCKS5 protocol in the command-line utility cURL allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the SOCKS5 protocol implementation in the CURL command-line utility is related to the issue of writing operations out of the buffer during the processing of hostname length. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary...
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Multiple Vulnerabilities (SSA:2023-284-01)
The version of curl installed on the remote host is prior to 8.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-284-01 advisory. - CVE-2023-38545 is a heap-based buffer overflow vulnerability in the SOCKS5 proxy handshake in libcurl and curl. When curl is...
curl: Multiple Vulnerabilities
Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in curl. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Note that the risk of...
curl security vulnerability
curl is a tool used to transfer data from or to a server. A security vulnerability exists in curl versions 7.9.1 through 8.3.0 that stems from the presence of a cookie injection vulnerability that allows an attacker to insert a cookie into a running program...
Important: curl
Issue Overview: An issue was found in curl that can cause a buffer overflow in its SOCKS5 proxy communications code. When curl is using a SOCKS5 proxy and it needs to resolve a hostname to an IP address, its default behavior is to pass the hostname to the proxy and allow it to perform the...
Debian DSA-5523-1 : curl - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5523 advisory. - CVE-2023-38545 is a heap-based buffer overflow vulnerability in the SOCKS5 proxy handshake in libcurl and curl. When curl is given a hostname to pass along...
DLA-3613-1 curl - security update
Bulletin has no description...
Critical Photon OS Security Update - PHSA-2023-5.0-0113
Updates of 'curl' packages of Photon OS have been released...
cURL SOCKS5 Heap Overflow Vulnerability
cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...
GLSA-202310-12 : curl: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202310-12 curl: Multiple Vulnerabilities - A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an...
curl 缓冲区错误漏洞
cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...
DSA-5523-1 curl - security update
Bulletin has no description...
Critical Photon OS Security Update - PHSA-2023-4.0-0487
Updates of 'curl' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-3.0-0667
Updates of 'curl' packages of Photon OS have been released...
The vulnerability of the curl_easy_duphandle function in the libcurl library allows a hacker to create or re-record cookies.
The vulnerability of the curleasyduphandle function in the libcurl library is related to external control via a filename or file path. Exploiting this vulnerability allows a malicious actor to create or rewrite cookie files remotely...
Ubuntu 16.04 ESM / 18.04 ESM : curl vulnerability (USN-6429-2)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6429-2 advisory. USN-6429-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : curl vulnerabilities (USN-6429-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6429-1 advisory. Jay Satiro discovered that curl incorrectly handled hostnames when using a SOCKS5 proxy. In environments where curl is configured to...
Curl 7.69 < 8.4.0 Heap Buffer Overflow
The version of curl installed on the remote host is affected by a heap based buffer overflow in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that...
