Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

haxx curl 7.18.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2013-4545
cURL and libcurl 7.18.0 up to and including 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle malicious...
Haxx Curl 7.32.0Haxx Curl 7.18.2Haxx Curl 7.18.1Haxx Curl 7.19.5Haxx Curl 7.19.2Haxx Curl 7.21.5Haxx Curl 7.21.2Haxx Curl 7.25.0Haxx Curl 7.26.0Haxx Curl 7.19.0Haxx Curl 7.19.6Haxx Curl 7.20.1Haxx Curl 7.21.6Haxx Curl 7.21.1Haxx Curl 7.22.0Haxx Curl 7.28.0Haxx Curl 7.29.0Haxx Curl 7.31.0Haxx Curl 7.19.7Haxx Curl 7.19.4Haxx Curl 7.21.7Haxx Curl 7.21.4
6.4
CVSSv2
CVE-2014-0138
The default configuration in cURL and libcurl 7.10.6 prior to 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent malicious users to connect as other users via a...
Haxx Curl 7.10.6Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.3Haxx Curl 7.16.4Haxx Curl 7.19.2Haxx Curl 7.19.3Haxx Curl 7.21.0Haxx Curl 7.21.1Haxx Curl 7.22.0Haxx Curl 7.23.0Haxx Curl 7.23.1Haxx Curl 7.29.0Haxx Curl 7.30.0Haxx Libcurl 7.10.8Haxx Libcurl 7.11.0Haxx Libcurl 7.13.1Haxx Libcurl 7.13.2Haxx Libcurl 7.15.4Haxx Libcurl 7.15.5
5.8
CVSSv2
CVE-2014-0139
cURL and libcurl 7.1 prior to 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL...
Haxx Curl 7.12.0Haxx Curl 7.12.1Haxx Curl 7.15.0Haxx Curl 7.15.1Haxx Curl 7.16.2Haxx Curl 7.16.3Haxx Curl 7.19.0Haxx Curl 7.19.1Haxx Curl 7.20.1Haxx Curl 7.21.0Haxx Curl 7.21.7Haxx Curl 7.22.0Haxx Curl 7.28.0Haxx Curl 7.28.1Haxx Libcurl 7.10.7Haxx Curl 7.10.8Haxx Curl 7.11.0Haxx Curl 7.13.0Haxx Curl 7.13.1Haxx Curl 7.13.2Haxx Curl 7.15.4Haxx Curl 7.15.5
6.8
CVSSv2
CVE-2013-2174
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 up to and including 7.30.0 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a &quo...
Haxx Curl 7.7Haxx Curl 7.9.3Haxx Curl 7.9.2Haxx Curl 7.10.1Haxx Curl 7.7.3Haxx Curl 7.8Haxx Curl 7.9.7Haxx Curl 7.9.6Haxx Curl 7.10.5Haxx Curl 7.10.8Haxx Curl 7.12.1Haxx Curl 7.12.2Haxx Curl 7.12.3Haxx Curl 7.15.1Haxx Curl 7.15.2Haxx Curl 7.16.1Haxx Curl 7.16.0Haxx Curl 7.19.6Haxx Curl 7.19.7Haxx Curl 7.21.6Haxx Curl 7.21.7Haxx Curl 7.22.0
4.3
CVSSv2
CVE-2011-2192
The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 up to and including 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
Haxx LibcurlApple Mac Os XFedoraproject Fedora 14Fedoraproject Fedora 15Debian Debian Linux 5.0Debian Debian Linux 6.0Debian Debian Linux 7.0Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04
4.3
CVSSv2
CVE-2011-3389
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle malicious users...
Opera Opera Browser -Microsoft Internet Explorer -Microsoft Windows -Google Chrome -Mozilla Firefox -Siemens Simatic Rf68xr FirmwareSiemens Simatic Rf615r FirmwareHaxx CurlRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 6.2Debian Debian Linux 5.0Debian Debian Linux 6.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 10.04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook