The Curl Project curl
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-3823 | 7.64.0 | libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. | HIGH 7.5 | 4.1 % | ||
| CVE-2019-3822 | 7.64.0 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 | CRITICAL 9.8 | 13 % | ||
| CVE-2018-16890 | 7.64.0 | libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 | HIGH 7.5 | 5.4 % | ||
| CVE-2018-16842 | from 7.14.1 to 7.61.1 | Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in i | CRITICAL 9.1 | 2.1 % | ||
| CVE-2018-16840 | from 7.59.0 to 7.61.1 | A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing | CRITICAL 9.8 | 3.4 % | ||
| CVE-2018-16839 | from 7.33.0 to 7.61.1 | Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service. | CRITICAL 9.8 | 5.8 % | ||
| CVE-2016-8625 | 7.51.0 | curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and | HIGH 7.5 | 4.3 % | ||
| CVE-2016-8623 | 7.51.0 | A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to in | HIGH 7.5 | 2.5 % | ||
| CVE-2016-8620 | 7.51.0 | The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled in | CRITICAL 9.8 | 4.7 % | ||
| CVE-2016-8619 | 7.51.0 | The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. | CRITICAL 9.8 | 5.0 % | ||
| CVE-2016-8616 | 7.51.0 | A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and pass | MEDIUM 5.9 | 3.5 % | ||
| CVE-2016-8615 | 7.51.0 | A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequ | HIGH 7.5 | 4.7 % | ||
| CVE-2016-8621 | 7.51.0 | The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit shor | HIGH 7.5 | 4.8 % | ||
| CVE-2016-8617 | 7.51.0 | The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least | HIGH 7.0 | 0.6 % | ||
| CVE-2016-8624 | 7.51.0 | curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and | HIGH 7.5 | 6.3 % | ||
| CVE-2016-8622 | 7.51.0 | The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be | CRITICAL 9.8 | 4.7 % | ||
| CVE-2016-8618 | 7.51.0 | The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` mu | CRITICAL 9.8 | 4.6 % |