Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

curl libcurl 7.14.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-2417
lib/ssluse.c in cURL and libcurl 7.4 up to and including 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoo...
Curl Libcurl 7.4Curl Libcurl 7.4.1Curl Libcurl 7.7Curl Libcurl 7.7.1Curl Libcurl 7.7.2Curl Libcurl 7.9.3Curl Libcurl 7.9.5Curl Libcurl 7.10.3Curl Libcurl 7.10.4Curl Libcurl 7.12.0Curl Libcurl 7.17.0Curl Libcurl 7.19.2Curl Libcurl 7.19.3Curl Libcurl 7.13.1Curl Libcurl 7.12.3Libcurl Libcurl 7.15.1Libcurl Libcurl 7.14Curl Libcurl 7.15.3Libcurl Libcurl 7.13Curl Libcurl 7.4.2Curl Libcurl 7.5Curl Libcurl 7.7.3
6.8
CVSSv2
CVE-2010-0734
content_encoding.c in libcurl 7.10.5 up to and including 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote malicious users to cause a denial of service (appli...
Curl Libcurl 7.10.8Curl Libcurl 7.11.0Curl Libcurl 7.12.3Curl Libcurl 7.13Curl Libcurl 7.15.2Curl Libcurl 7.15.3Curl Libcurl 7.19.1Curl Libcurl 7.19.2Curl Libcurl 7.10.5Curl Libcurl 7.10.6Curl Libcurl 7.10.7Curl Libcurl 7.12.1Curl Libcurl 7.12.2Curl Libcurl 7.15Curl Libcurl 7.15.1Curl Libcurl 7.18.2Curl Libcurl 7.19.0Curl Libcurl 7.19.7Curl Libcurl 7.12Curl Libcurl 7.12.0Curl Libcurl 7.14Curl Libcurl 7.14.1
6.8
CVSSv2
CVE-2009-0037
The redirect implementation in curl and libcurl 5.11 up to and including 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary...
Curl Curl 6.3.1Curl Curl 6.4Curl Curl 7.2Curl Curl 7.3Curl Curl 7.6Curl Curl 7.6.1Curl Curl 7.8.1Curl Curl 7.8.2Curl Curl 7.9.6Curl Curl 7.9.7Curl Curl 7.10.5Curl Curl 7.10.6Curl Curl 7.13.2Curl Curl 7.14Curl Curl 7.19.3Curl Libcurl 7.12Curl Libcurl 7.14.1Curl Libcurl 7.15Curl Libcurl 7.15.1Curl Curl 6.5Curl Curl 6.5.1Curl Curl 7.4
6.4
CVSSv2
CVE-2014-0138
The default configuration in cURL and libcurl 7.10.6 prior to 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent malicious users to connect as other users via a...
Haxx Curl 7.10.6Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.3Haxx Curl 7.16.4Haxx Curl 7.19.2Haxx Curl 7.19.3Haxx Curl 7.21.0Haxx Curl 7.21.1Haxx Curl 7.22.0Haxx Curl 7.23.0Haxx Curl 7.23.1Haxx Curl 7.29.0Haxx Curl 7.30.0Haxx Libcurl 7.10.8Haxx Libcurl 7.11.0Haxx Libcurl 7.13.1Haxx Libcurl 7.13.2Haxx Libcurl 7.15.4Haxx Libcurl 7.15.5
5.8
CVSSv2
CVE-2014-0139
cURL and libcurl 7.1 prior to 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL...
Haxx Curl 7.12.0Haxx Curl 7.12.1Haxx Curl 7.15.0Haxx Curl 7.15.1Haxx Curl 7.16.2Haxx Curl 7.16.3Haxx Curl 7.19.0Haxx Curl 7.19.1Haxx Curl 7.20.1Haxx Curl 7.21.0Haxx Curl 7.21.7Haxx Curl 7.22.0Haxx Curl 7.28.0Haxx Curl 7.28.1Haxx Libcurl 7.10.7Haxx Curl 7.10.8Haxx Curl 7.11.0Haxx Curl 7.13.0Haxx Curl 7.13.1Haxx Curl 7.13.2Haxx Curl 7.15.4Haxx Curl 7.15.5
7.5
CVSSv2
CVE-2007-3564
libcurl 7.14.0 up to and including 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote malicious users to bypass certain access restrictions.
Libcurl Libcurl 7.15.2Libcurl Libcurl 7.15.3Libcurl Libcurl 7.15Libcurl Libcurl 7.15.1Libcurl Libcurl 7.16.3Libcurl Libcurl 7.14Libcurl Libcurl 7.14.1
6.8
CVSSv2
CVE-2013-2174
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 up to and including 7.30.0 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a &quo...
Haxx Curl 7.7Haxx Curl 7.9.3Haxx Curl 7.9.2Haxx Curl 7.10.1Haxx Curl 7.7.3Haxx Curl 7.8Haxx Curl 7.9.7Haxx Curl 7.9.6Haxx Curl 7.10.5Haxx Curl 7.10.8Haxx Curl 7.12.1Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.1Haxx Curl 7.16.0Haxx Curl 7.19.6Haxx Curl 7.19.7Haxx Curl 7.21.6Haxx Curl 7.21.7Haxx Curl 7.22.0
7.5
CVSSv2
CVE-2017-8818
curl and libcurl prior to 7.57.0 on 32-bit platforms allow malicious users to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Haxx Curl 7.56.1Haxx Libcurl 7.56.0Haxx Libcurl 7.56.1Haxx Curl 7.56.0
4.6
CVSSv2
CVE-2005-4077
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 up to and including 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating...
Daniel Stenberg Curl 7.13Daniel Stenberg Curl 7.13.1Daniel Stenberg Curl 7.11.2Daniel Stenberg Curl 7.13.2Daniel Stenberg Curl 7.14Daniel Stenberg Curl 7.12.2Daniel Stenberg Curl 7.12.3Daniel Stenberg Curl 7.12Daniel Stenberg Curl 7.12.1Daniel Stenberg Curl 7.14.1Daniel Stenberg Curl 7.15
5
CVSSv2
CVE-2019-3823
libcurl versions from 7.34.0 to prior to 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set...
Haxx LibcurlCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 9.0Netapp Clustered Data OntapOracle Http Server 12.2.1.3.0Oracle Secure Global Desktop 5.4Oracle Communications Operations Monitor 3.4Oracle Communications Operations Monitor 4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook