daniel stenberg vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote malicious users to execute arbitrary commands by forcing a long error message to be generated.

Daniel Stenberg Curl 6.4 Daniel Stenberg Curl 6.5 Daniel Stenberg Curl 7.3 Daniel Stenberg Curl 7.4 Daniel Stenberg Curl 6.0 Daniel Stenberg Curl 6.1 Daniel Stenberg Curl 7.1 Daniel Stenberg Curl 7.1.1 Daniel Stenberg Curl 6.5.1 Daniel Stenberg Curl 6.5.2 Daniel Stenberg Curl 6.1beta Daniel Stenberg Curl 6.3 Daniel Stenberg Curl 7.2 Daniel Stenberg Curl 7.2.1

2 EDB exploits

4.6

CVSSv2

Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 up to and including 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating...

Daniel Stenberg Curl 7.13 Daniel Stenberg Curl 7.13.1 Daniel Stenberg Curl 7.11.2 Daniel Stenberg Curl 7.13.2 Daniel Stenberg Curl 7.14 Daniel Stenberg Curl 7.12.2 Daniel Stenberg Curl 7.12.3 Daniel Stenberg Curl 7.12 Daniel Stenberg Curl 7.12.1 Daniel Stenberg Curl 7.14.1 Daniel Stenberg Curl 7.15

7.5

CVSSv2

c-ares prior to 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote malicious users to spoof DNS responses by guessing the field value.

Daniel Stenberg C-ares 1.0 Daniel Stenberg C-ares 1.3.2 Daniel Stenberg C-ares 1.1 Daniel Stenberg C-ares 1.2 Daniel Stenberg C-ares 1.2.1 Daniel Stenberg C-ares 1.3 Daniel Stenberg C-ares 1.3.1

5

CVSSv2

The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence (Unix rand), which makes it easier for remote malicious users to spoof DNS responses by guessing certain values.

Daniel Stenberg C-ares 1.0 Daniel Stenberg C-ares 1.1 Daniel Stenberg C-ares 1.3.2 Daniel Stenberg C-ares 1.2 Daniel Stenberg C-ares 1.2.1 Daniel Stenberg C-ares 1.3 Daniel Stenberg C-ares 1.3.1

7.5

CVSSv2

Heap-based buffer overflow in cURL and libcURL 7.15.0 up to and including 7.15.2 allows remote malicious users to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

Daniel Stenberg Curl 7.15.1 Daniel Stenberg Curl 7.15.2 Daniel Stenberg Curl 7.15.0

10

CVSSv2

Dispair 0.1 and 0.2 allows remote malicious users to execute arbitrary shell commands via certain form fields.

Daniel Stenberg Dispair 0.1 Daniel Stenberg Dispair 0.2

1 EDB exploit

7.5

CVSSv2

The stringprep_utf8_to_ucs4 function in libin prior to 1.31, as used in jabberd2, allows context-dependent malicious users to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.

Gnu Libidn Opensuse Opensuse 13.2 Opensuse Opensuse 13.1 Fedoraproject Fedora 21 Fedoraproject Fedora 22

5

CVSSv2

The idna_to_ascii_4i function in lib/idna.c in libidn prior to 1.33 allows context-dependent malicious users to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.

Opensuse Leap 42.1 Gnu Libidn Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

6.8

CVSSv2

GNU Wget prior to 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote malicious users to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Cert...

Gnu Wget 1.10.1 Gnu Wget 1.10.2 Gnu Wget 1.9 Gnu Wget 1.9.1 Gnu Wget 1.11.1 Gnu Wget 1.5.3 Gnu Wget 1.6 Gnu Wget 1.11.2 Gnu Wget 1.11.3 Gnu Wget 1.10 Gnu Wget 1.8 Gnu Wget 1.8.1 Gnu Wget 1.7 Gnu Wget 1.7.1 Gnu Wget 1.11 Gnu Wget

6.8

CVSSv2

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it coul...

Haxx Curl

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook