Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

curl libcurl 7.20.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2012-0036
curl and libcurl 7.2x prior to 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote malicious users to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) P...
Curl Curl 7.21.1Curl Curl 7.21.2Curl Curl 7.23.0Curl Curl 7.23.1Curl Curl 7.20.1Curl Curl 7.21.0Curl Curl 7.21.7Curl Curl 7.22.0Curl Curl 7.21.3Curl Curl 7.21.4Curl Curl 7.20.0Curl Curl 7.21.5Curl Curl 7.21.6Curl Libcurl 7.21.3Curl Libcurl 7.21.4Curl Libcurl 7.21.1Curl Libcurl 7.21.2Curl Libcurl 7.23.1Curl Libcurl 7.20.0Curl Libcurl 7.21.5Curl Libcurl 7.21.6Curl Libcurl 7.21.7
4.3
CVSSv2
CVE-2013-4545
cURL and libcurl 7.18.0 up to and including 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle malicious...
Haxx Curl 7.32.0Haxx Curl 7.18.2Haxx Curl 7.18.1Haxx Curl 7.19.5Haxx Curl 7.19.2Haxx Curl 7.21.5Haxx Curl 7.21.2Haxx Curl 7.25.0Haxx Curl 7.26.0Haxx Curl 7.19.0Haxx Curl 7.19.6Haxx Curl 7.20.1Haxx Curl 7.21.6Haxx Curl 7.21.1Haxx Curl 7.22.0Haxx Curl 7.28.0Haxx Curl 7.29.0Haxx Curl 7.31.0Haxx Curl 7.19.7Haxx Curl 7.19.4Haxx Curl 7.21.7Haxx Curl 7.21.4
6.8
CVSSv2
CVE-2010-0734
content_encoding.c in libcurl 7.10.5 up to and including 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote malicious users to cause a denial of service (appli...
Curl Libcurl 7.10.8Curl Libcurl 7.11.0Curl Libcurl 7.12.3Curl Libcurl 7.13Curl Libcurl 7.15.2Curl Libcurl 7.15.3Curl Libcurl 7.19.1Curl Libcurl 7.19.2Curl Libcurl 7.10.5Curl Libcurl 7.10.6Curl Libcurl 7.10.7Curl Libcurl 7.12.1Curl Libcurl 7.12.2Curl Libcurl 7.15Curl Libcurl 7.15.1Curl Libcurl 7.18.2Curl Libcurl 7.19.0Curl Libcurl 7.19.7Curl Libcurl 7.12Curl Libcurl 7.12.0Curl Libcurl 7.14Curl Libcurl 7.14.1
6.4
CVSSv2
CVE-2014-0138
The default configuration in cURL and libcurl 7.10.6 prior to 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent malicious users to connect as other users via a...
Haxx Curl 7.10.6Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.3Haxx Curl 7.16.4Haxx Curl 7.19.2Haxx Curl 7.19.3Haxx Curl 7.21.0Haxx Curl 7.21.1Haxx Curl 7.22.0Haxx Curl 7.23.0Haxx Curl 7.23.1Haxx Curl 7.29.0Haxx Curl 7.30.0Haxx Libcurl 7.10.8Haxx Libcurl 7.11.0Haxx Libcurl 7.13.1Haxx Libcurl 7.13.2Haxx Libcurl 7.15.4Haxx Libcurl 7.15.5
5.8
CVSSv2
CVE-2014-0139
cURL and libcurl 7.1 prior to 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL...
Haxx Curl 7.12.0Haxx Curl 7.12.1Haxx Curl 7.15.0Haxx Curl 7.15.1Haxx Curl 7.16.2Haxx Curl 7.16.3Haxx Curl 7.19.0Haxx Curl 7.19.1Haxx Curl 7.20.1Haxx Curl 7.21.0Haxx Curl 7.21.7Haxx Curl 7.22.0Haxx Curl 7.28.0Haxx Curl 7.28.1Haxx Libcurl 7.10.7Haxx Curl 7.10.8Haxx Curl 7.11.0Haxx Curl 7.13.0Haxx Curl 7.13.1Haxx Curl 7.13.2Haxx Curl 7.15.4Haxx Curl 7.15.5
6.8
CVSSv2
CVE-2013-2174
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 up to and including 7.30.0 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a &quo...
Haxx Curl 7.7Haxx Curl 7.9.3Haxx Curl 7.9.2Haxx Curl 7.10.1Haxx Curl 7.7.3Haxx Curl 7.8Haxx Curl 7.9.7Haxx Curl 7.9.6Haxx Curl 7.10.5Haxx Curl 7.10.8Haxx Curl 7.12.1Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.1Haxx Curl 7.16.0Haxx Curl 7.19.6Haxx Curl 7.19.7Haxx Curl 7.21.6Haxx Curl 7.21.7Haxx Curl 7.22.0
4.6
CVSSv2
CVE-2020-8177
curl 7.20.0 up to and including 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
Haxx CurlDebian Debian Linux 10.0Fujitsu M10-1 FirmwareFujitsu M10-4 FirmwareFujitsu M10-4s FirmwareFujitsu M12-1 FirmwareFujitsu M12-2 FirmwareFujitsu M12-2s FirmwareSiemens Sinec Infrastructure Network ServicesSplunk Universal Forwarder 9.1.0Splunk Universal Forwarder
5
CVSSv2
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be byp...
Haxx CurlDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 35Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59
4.3
CVSSv2
CVE-2021-22947
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of ca...
Haxx CurlFedoraproject Fedora 33Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook