3096 matches found
curl: Unexpected access to process open files via file:///proc/self/fd/n
Summary: fileconnect routine https://github.com/curl/curl/blob/1b71bc532bde8621fd3260843f8197182a467ff2/lib/file.cL134 does not prevent access to /proc/self/fd pseudo filesystem. Application using libcurl and accepting URLs to fetch can be tricked to return content of any open file by passing a...
Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local
Summary Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5482 DESCRIPTION: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVSS Base score: 6.3 CVSS Temporal Score: See:...
Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local
Summary Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-5435 DESCRIPTION: An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. CVSS Base score: 7.3 CVSS Temporal Score: See:...
EulerOS 2.0 SP3 : curl (EulerOS-SA-2019-2566)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow...
The vulnerability of the tftp_receive_packet function in the libcurl library, related to buffer overflow in memory, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the tftpreceivepacket function in the libcurl library is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Juniper Junos Space < 19.2R1 Multiple Vulnerabilities (JSA10951)
According to its self-reported version number, the remote Junos Space version is prior to 19.2R1. It is, therefore, affected by multiple vulnerabilities: - A memory double free vulnerability exists in The libcurl API function called curlmaprintf before version 7.51.0 due to an unsafe sizet...
The vulnerability of the libcurl library, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the libcurl library is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2012-5582
A flaw was found in the eppclient utility where it incorrectly used the libcurl API. An attacker could abuse this flaw to bypass intended security mechanisms...
CVE-2012-5582
opendnssec misuses libcurl API...
Buffer overflow
opendnssec misuses libcurl API...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-5582
CVE-2012-5582 concerns opendnssec’s eppclient utility, which misuses the libcurl API. The Red Hat entry documents the root cause as improper use of libcurl, enabling an attacker to bypass intended security mechanisms. Public sources in the connected set describe the flaw and its potential to unde...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-6070
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
Security feature bypass
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
CVE-2012-6070
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
UBUNTU-CVE-2012-6070
Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks...
CVE-2012-6070
CVE-2012-6070 affects Falconpl prior to 0.9.6.9-git20120606. The root cause is a misuses of the libcurl API that may allow remote attackers to interfere with security checks. The available records do not specify the exact vulnerable component/version beyond Falconpl and the cited git tag, nor do ...