cURL/libcurl 7.x < 7.47.0 Multiple Vulnerabilities

Binary data 9760.prm...

cURL/libcURL Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Haxx cURL/libcURL Remote Security Bypass Vulnerability (CNVD-2016-10741)

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

Haxx cURL/libcURL Remote Security Bypass Vulnerability

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

Debian DSA-3705-1 : curl - security update

Several vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. - CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case...

cURL/libcURL Cookie Injection Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A cookie injection security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Internet Bug Bounty: cURL / libcURL - CVE-2016-8624 invalid URL parsing with '#'

invalid URL parsing with '' ============================ Project cURL Security Advisory, November 2, 2016 - Permalink https://curl.haxx.se/docs/adv20161102J.html VULNERABILITY ------------- curl doesn't parse the authority component of the URL correctly when the host name part ends with a ''...

RedHat Update for curl RHSA-2016:2575-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : curl (RHSA-2016:2575)

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: Red Hat Security Advisory: curl security, bug fix, and enhancement update

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

[ASA-201611-8] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-201611-8 ========================================= Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8619 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : libcurl-compat Type : multiple issu...

[ASA-201611-10] lib32-libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201611-10 ========================================== Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8618 CVE-2016-8619 CVE-2016-8621 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : lib32-libcurl-gnutls Type :...

[ASA-201611-9] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201611-9 ========================================= Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8619 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : libcurl-gnutls Type : multiple issu...

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

CVE-2016-8618

The libcurl API function called curlmaprintf before version 7.51.0 can be tricked into doing a double-free due to an unsafe sizet multiplication, on systems using 32 bit sizet variables...

CURL-CVE-2016-8622 URL unescape heap overflow via integer truncation

The URL percent-encoding decode function in libcurl is called curleasyunescape. Internally, even if this function would be made to allocate a destination buffer larger than 2GB, it would return that new length in a signed 32-bit integer variable, thus the length would get either truncated only or...

CURL-CVE-2016-8617 OOB write via unchecked multiplication

In libcurl's base64 encode function, the output buffer is allocated as follows without any checks on insize: malloc insize 4 / 3 + 4 On systems with 32-bit addresses in userspace e.g. x86, ARM, x32, the multiplication in the expression wraps around if insize is at least 1GB of data. If this...

OOB write via unchecked multiplication

In libcurl's base64 encode function, the output buffer is allocated as follows without any checks on insize: malloc insize 4 / 3 + 4 On systems with 32-bit addresses in userspace e.g. x86, ARM, x32, the multiplication in the expression wraps around if insize is at least 1GB of data. If this...

PT-2016-7528

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.51.0 Description The issue concerns the URL percent-encoding decode function in libcurl, internally known as curl easy unescape. This function can lead to libcurl writing outside of its heap-based buffer if it...

PT-2016-7524

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.51.0 Description The issue arises from an unsafe size t multiplication in the curl maprintf function, which can be tricked into doing a double-free. This occurs on systems using 32-bit size t variables. The function...