3824 matches found
[ASA-201612-22] curl: multiple issues
Arch Linux Security Advisory ASA-201612-22 ========================================== Severity: Medium Date : 2016-12-27 CVE-ID : CVE-2016-9586 CVE-2016-9594 Package : curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-112 Summary ======= The package curl before...
CURL-CVE-2016-9594 uninitialized random
libcurl's new internal function that returns a good 32-bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. This random value is used to generate nonces for Digest and NTLM authentication, for generating boundary...
cURL -- uninitialized random vulnerability
Project curl Security Advisory: libcurl's new internal function that returns a good 32bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. This random value is used to generate nonces for Digest and NTLM...
cURL/libcURL Buffer Overflow Vulnerability
Haxx curl and libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that utilize URL syntax to work at the command line. libcurl is a free, open source client-side URL transfer library. A buffer overflow vulnerability exists in Haxx curl and libcurl versions...
CVE-2016-9586
curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks...
CURL-CVE-2016-9586 printf floating point buffer overflow
libcurl's implementation of the printf functions triggers a buffer overflow when doing a large floating point output. The bug occurs when the conversion outputs more than 255 bytes. The flaw happens because the floating point conversion is using system functions without the correct boundary check...
printf floating point buffer overflow
libcurl's implementation of the printf functions triggers a buffer overflow when doing a large floating point output. The bug occurs when the conversion outputs more than 255 bytes. The flaw happens because the floating point conversion is using system functions without the correct boundary check...
PT-2016-7889 · Curl · Libcurl
Name of the Vulnerable Software and Affected Versions: libcurl versions 7.30.0 through 7.51.0 Description: The issue allows remote attackers to obtain sensitive information, cause a denial of service crash, or possibly have unspecified other impact via a wildcard certificate name, which triggers ...
PT-2016-7888 · Curl · Libcurl
Name of the Vulnerable Software and Affected Versions: libcurl versions 7.30.0 through 7.51.0 Description: The issue arises from a flaw in the verify certificate function when comparing a wildcard certificate name to the hostname used for the connection. This flaw allows remote attackers to condu...
UBUNTU-CVE-2016-9586
curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks...
PT-2016-7785
Name of the Vulnerable Software and Affected Versions curl versions prior to 7.52.0 Description The issue arises from a buffer overflow in libcurl's implementation of the printf functions when handling large floating point output. This occurs because the floating point conversion uses system...
curl: Re-using connection with wrong client cert
It was found that the libcurl library did not check the client certificate when choosing the TLS connection to reuse. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate...
BSA-2016-198
Security Advisory ID : BSA-2016-198 Component : curl/libcurl Revision : 2.0: Final Use-after-free vulnerability inlibcurlbefore 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors...
cURL/libcurl 7.x < 7.50.3 RCE
Binary data 9825.prm...
SOL85307687 - cURL and libcurl vulnerabilities CVE-2014-3613, CVE-2014-3707, and CVE-2014-8150
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
cURL/libcurl 7.x < 7.50.1 Multiple Vulnerabilities
Binary data 9764.prm...
cURL/libcurl 7.x < 7.49.1 RCE
Binary data 9763.prm...
cURL/libcurl 7.x < 7.48.0 Unknown Vulnerability
Binary data 9761.prm...