opensuse/curl&distro=openSUSE Tumbleweed

Vulnerabilities (176)

• CVE-2021-22945CriSep 23, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

• CVE-2021-22924LowAug 5, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively

• CVE-2021-22922MedAug 5, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different

• CVE-2021-22901HigJun 11, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code executio

• CVE-2021-22898LowJun 11, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could

• CVE-2021-22890LowApr 1, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as

• CVE-2021-22876MedApr 1, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP

• CVE-2021-22298MedFeb 6, 2021
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions i

• CVE-2020-8286HigDec 14, 2020
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

• CVE-2020-8285HigDec 14, 2020
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

• CVE-2020-8284LowDec 14, 2020
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanni

• CVE-2020-8231HigDec 14, 2020
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

• CVE-2020-8169HigDec 14, 2020
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

• CVE-2019-5482CriSep 16, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

• CVE-2019-5481CriSep 16, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

• CVE-2019-5436HigMay 28, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

• CVE-2019-5435LowMay 28, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

• CVE-2019-3823MedFeb 6, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5,

• CVE-2019-3822CriFeb 6, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received

• CVE-2018-16890HigFeb 6, 2019
  affected < 7.79.1-1.1fixed 7.79.1-1.1

  libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulne