haxx libcurl 7.56.0 vulnerabilities and exploits

(subscribe to this query)

curl and libcurl prior to 7.57.0 on 32-bit platforms allow malicious users to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.

Haxx Curl 7.56.1 Haxx Libcurl 7.56.0 Haxx Libcurl 7.56.1 Haxx Curl 7.56.0

libcurl versions from 7.34.0 to prior to 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set...

Haxx Libcurl Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Debian Debian Linux 9.0 Netapp Clustered Data Ontap Oracle Http Server 12.2.1.3.0 Oracle Secure Global Desktop 5.4 Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.0

libcurl versions from 7.36.0 to prior to 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vul...

Haxx Libcurl Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Debian Debian Linux 9.0 Netapp Clustered Data Ontap Siemens Sinema Remote Connect Client Oracle Http Server 12.2.1.3.0 Oracle Secure Global Desktop 5.4 Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.0 Redhat Enterprise Linux 8.0 F5 Big-ip Access Policy Manager

1 Github repository

A heap use-after-free flaw was found in curl versions from 7.59.0 up to and including 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulli...

Haxx Curl Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04

Curl versions 7.33.0 up to and including 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.

Haxx Curl Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

Curl versions 7.14.1 up to and including 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.

Haxx Curl Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0

libcurl versions from 7.36.0 to prior to 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously receive...

3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook