cURL/libcurl Version Detection

Binary data 9772.prm...

cURL/libcurl 7.x < 7.48.0 Unknown Vulnerability

Binary data 9761.prm...

cURL/libcurl 7.x < 7.49.1 RCE

Binary data 9763.prm...

cURL/libcurl 7.x < 7.49.0 Information Disclosure

Binary data 9762.prm...

cURL/libcurl 7.x < 7.50.1 Multiple Vulnerabilities

Binary data 9764.prm...

cURL/libcurl 7.x < 7.47.0 Multiple Vulnerabilities

Binary data 9760.prm...

Haxx cURL/libcURL Remote Security Bypass Vulnerability (CNVD-2016-10741)

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

Debian DSA-3705-1 : curl - security update

Several vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. - CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case...

cURL/libcURL Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Haxx cURL/libcURL Remote Security Bypass Vulnerability

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

cURL/libcURL Cookie Injection Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A cookie injection security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Internet Bug Bounty: cURL / libcURL - CVE-2016-8624 invalid URL parsing with '#'

invalid URL parsing with '' ============================ Project cURL Security Advisory, November 2, 2016 - Permalink https://curl.haxx.se/docs/adv20161102J.html VULNERABILITY ------------- curl doesn't parse the authority component of the URL correctly when the host name part ends with a ''...

RedHat Update for curl RHSA-2016:2575-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : curl (RHSA-2016:2575)

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: Red Hat Security Advisory: curl security, bug fix, and enhancement update

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

[ASA-201611-9] libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201611-9 ========================================= Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8619 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : libcurl-gnutls Type : multiple issu...

[ASA-201611-10] lib32-libcurl-gnutls: multiple issues

Arch Linux Security Advisory ASA-201611-10 ========================================== Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8618 CVE-2016-8619 CVE-2016-8621 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : lib32-libcurl-gnutls Type :...

[ASA-201611-8] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-201611-8 ========================================= Severity: High Date : 2016-11-03 CVE-ID : CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8619 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2016-8625 Package : libcurl-compat Type : multiple issu...

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

CVE-2016-8618

The libcurl API function called curlmaprintf before version 7.51.0 can be tricked into doing a double-free due to an unsafe sizet multiplication, on systems using 32 bit sizet variables...