CVE-2022-32221

CVE-2022-32221 concerns curl/libcurl where the read callback (CURLOPT_READFUNCTION) may be used for POST data even after a PUT if the same handle was used for a PUT with that callback. This can cause sending the wrong data or memory errors on a subsequent POST. Connected advisories note this affe...

CVE-2022-43552

The CVE-2022-43552 vulnerability affects curl

CVE-2022-35252

CVE-2022-35252 affects curl’s handling of cookies containing control codes; when such cookies are echoed back to a server, the server may return 400 responses, effectively enabling a “sister site” to deny service to other siblings. Public advisories confirm this is fixed in curl updates across se...

CVE-2022-27776

CVE-2022-27776 is a curl vulnerability where credentials could be leaked during HTTP redirects to the same host on a different port. Root cause: insufficiently protected credentials in redirect handling. Impact: potential exposure of authentication or cookie headers. Affected: curl/libcurl across...

CVE-2023-28322

The CVE-2023-28322 information disclosure issue affects curl/libcurl when performing HTTP(S) transfers and using a reused handle that was previously used for PUT and then changed to POST. The flaw arises from curl incorrectly using the read callback (CURLOPT_READFUNCTION) to supply data for POSTF...

CVE-2022-27782

CVE-2022-27782 affects curl/libcurl: it can reuse a previously created connection when TLS/SSH-related options were changed, due to incomplete configuration-matching checks. Connected advisories confirm this issue across multiple platforms (AIX, Amazon Linux, CloudLinux/CentOS, Cloud Foundry) and...

CVE-2022-27781

CVE-2022-27781 affects libcurl builds using NSS; due to an erroneous function, a malicious server could cause libcurl to enter a never-ending busy-loop when retrieving certificate information, impacting availability. Affected advisories suggest upgrading curl/libcurl to a patched version (e.g., n...

CVE-2022-32206

CVE-2022-32206 affects curl

CVE-2023-28321

CVE-2023-28321 affects curl before 8.1.0, where a private wildcard matching function used for TLS SAN wildcard patterns can mis-match IDN hostnames. IDNs are punycode-encoded (starting with xn--), but the curl wildcard check could still accept patterns like x* that should not match, potentially a...

CVE-2023-28319

CVE-2023-28319 : A use-after-free in curl/libcurl’s SSH fingerprint check (verifying server public keys with a SHA-256 hash) occurs when verification fails; memory for the fingerprint is freed before the error message is built, potentially leaking the freed hash data in error output. Affected are...

CVE-2016-8625

CVE-2016-8625 affects curl/libcurl prior to 7.51.0 when built with libidn, using IDNA 2003 instead of IDNA 2008. This mismatch can cause requests to the wrong host. Impact described in connected docs includes remote code execution, cookie injection, and information disclosure via multiple vectors...

CVE-2016-9586

CVE-2016-9586 affects curl: libcurl’s printf() implementation can overflow a buffer during large floating-point output when a vulnerable application passes an external format string. This permits remote attackers if an application uses unsafely filtered external format strings. The public details...

CVE-2023-28320

The CVE-2023-28320 issue affects curl/libcurl when built with a synchronous resolver, where name resolution can hang via alarm() and siglongjmp(). It uses a non-mutex-protected global buffer, risking crashes or misbehavior in multi-threaded apps. Affected: curl

CVE-2016-8618

The CVE-2016-8618 vulnerability affects libcurl’s curl_maprintf() and can be exploited to trigger a double-free due to an unsafe size_t multiplication on 32-bit size_t systems. The issue is addressed by upgrading to curl version 7.51.0 (upstream) or applying the patch. The Debian/Ubuntu advisorie...

CVE-2016-8620

CVE-2016-8620 concerns curl’s globbing feature, where parsing numeric ranges could write beyond allocated memory and read out-of-bounds. The issue affects the curl tool (not libcurl) and could enable remote code execution or unintended behavior when handling invalid ranges; it may also enable out...

CVE-2016-8616

CVE-2016-8616 affects curl prior to 7.51.0. When re-using a connection, curl performed case-insensitive comparisons of the username and password against existing connections, enabling an attacker who knows the case-insensitive form of the correct password to cause reuse of an unused connection wi...

CVE-2016-8619

CVE-2016-8619 affects curl, where the Kerberos authentication path reads length fields and realloc() may be called with 0, leading to a memory double-free. This issue is documented across multiple sources (Debian DSA-3705-1 and ALAS-2016-766), identifying the vulnerable code path as read_data() i...

CVE-2016-8624

CVE-2016-8624 affects curl up to version 7.51.0, where the authority component parsing can mis-handle hostnames ending with a '#', potentially causing connections to an unintended host. Connected sources (e.g., Apple security content and cloud-founding advisories) confirm the issue as a URL parsi...

CVE-2016-8615

CVE-2016-8615 affects curl prior to 7.51.0, where if cookie state is written to a cookie jar and later read back, a malicious HTTP server can inject cookies for arbitrary domains. This cookie-jar handling issue is corroborated by Debian security advisories and Cloud Foundry USN entries, which des...

CVE-2016-8617

CVE-2016-8617 affects libcurl’s base64 encoding path. The output buffer is allocated as insize * 4 / 3 + 4 without checks, which on 32‑bit user-space systems can wrap when input size reaches ≥1 GB. This under-allocated buffer may be overflowed as the full encoded data is written. Systems with 64‑...

CVE-2016-8621

CVE-2016-8621 – curl_getdate out-of-bounds read. The vulnerability affects curl/libcurl and is triggered when parsing certain input date strings that are one digit short, allowing an out-of-bounds read. Documented in multiple sources, including Debian, Cloud Foundry USN, and Apple security notes,...

CVE-2016-8623

The documents confirm CVE-2016-8623 affects curl prior to 7.51.0, where the cookie handling allows a use-after-free across threads that can disclose information. The issue is rooted in how curl collects/sends cookies, releasing the cookie lock while returning a list of references, enabling anothe...

CVE-2016-4606

CVE-2016-4606 affects curl before 7.49.1 on Apple OS X versions prior to macOS Sierra 10.12. The vulnerability allows remote or local attackers to execute arbitrary code, obtain sensitive information, cause denial-of-service, bypass security restrictions, and perform unauthorized actions. Root ca...

CVE-2017-2629

CVE-2017-2629 affects curl and libcurl prior to 7.53.0, where the TLS Certificate Status Request (OCSP stapling) check incorrectly returns valid proof even when none is provided or the server does not support the extension. This can cause users to fail to detect a server certificate becoming inva...

CVE-2016-9594

CVE-2016-9594 affects curl/libcurl from 7.52.0, where an internal function intended to return a 32-bit random value could overwrite the destination pointer, yielding weak/non-random nonces for Digest/NTLM and related HTTP form data. This enabled potential remote code execution via crafted input. ...