CBL Mariner 2.0 Security Update: curl (CVE-2021-22898)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-22898 advisory. - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as...

curl 路径遍历漏洞

curl etc. are products of. curl is a product of Rovin Bhandari FTP etc. are products of Rovin Bhandari individual developers. ftp is an implementation of a simple FTP client and server. elixir-ecto ecto etc. are products of elixir-ecto open source. ecto is a toolkit for data mapping and...

UBUNTU-CVE-2023-27534

A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32206)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32206 advisory. - curl 7.84.0 supports chained HTTP compression algorithms, meaning that a serverresponse can be compressed...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32205)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32205 advisory. - A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl 7.84...

PT-2023-2319 · Curl +9 · Curl +9

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.0.0 Description: A path traversal vulnerability exists in the SFTP implementation of curl, where the tilde character is wrongly replaced when used as a prefix in the first path element. This flaw can be exploited by...

curl 授权问题漏洞

curl is a tool used to transfer data from or to a server. A security vulnerability exists in versions prior to curl 8.0 that stems from an authentication bypass vulnerability that could allow unauthorized access to sensitive information...

CBL Mariner 2.0 Security Update: cmake / curl / mysql / rust / tensorflow (CVE-2022-43552)

The version of cmake / curl / mysql / rust / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-43552 advisory. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to...

UBUNTU-CVE-2023-27533

A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : curl vulnerabilities (USN-5964-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5964-1 advisory. Harry Sintonen discovered that curl incorrectly handled certain TELNET connection options. Due to lack of proper input scrubbing,...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32207)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32207 advisory. - When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Multiple Vulnerabilities (SSA:2023-079-01)

The version of curl installed on the remote host is prior to 8.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-079-01 advisory. - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker t...

CBL Mariner 2.0 Security Update: curl (CVE-2022-42915)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42915 advisory. - curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non- HTTPS UR...

curl 资源管理错误漏洞

curl is a tool for transferring data from or to a server. A security vulnerability exists in versions prior to curl 8.0, which stems from the presence of a double-release vulnerability that could lead to double-release or reuse after release...

curl 授权问题漏洞

curl is libcurl is got is A security vulnerability exists in curl versions prior to 8.0 that stems from an authentication bypass vulnerability that could lead to unauthorized access to sensitive information...

curl 注入漏洞

curl is a tool used to transfer data from or to a server. A security vulnerability exists in versions prior to curl 8.0 that stems from the presence of an input validation vulnerability that could allow an attacker to be able to execute arbitrary code on a system...

CBL Mariner 2.0 Security Update: curl (CVE-2022-42916)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42916 advisory. - In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32208)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32208 advisory. - When curl 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This fl...

CBL Mariner 2.0 Security Update: curl (CVE-2021-22897)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-22897 advisory. - curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1522)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...