The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of curl

curl: buffer overflow via TFTP Small Blocksize
An attacker can trigger a buffer overflow via TFTP Small Blocksize of curl, in order to trigger a denial of service, and possibly to run code...
CVE-2019-5482, DLA-1917-1, DSA-2019-168, DSA-2019-169, DSA-2019-201, DSA-4633-1, FEDORA-2019-9e6357d82f, FEDORA-2019-f2a520135e, openSUSE-SU-2019:2149-1, openSUSE-SU-2019:2169-1, SSA:2019-254-01, SUSE-SU-2019:14172-1, SUSE-SU-2019:2339-2, SUSE-SU-2019:2373-1, SUSE-SU-2019:2381-1, USN-4129-1, USN-4129-2, VIGILANCE-VUL-30303
curl for Windows: privilege escalation via OpenSSL Engine Loading
An attacker can bypass restrictions via OpenSSL Engine Loading of curl for Windows, in order to escalate his privileges...
cpuoct2019, CVE-2019-5443, NTAP-20191017-0002, VIGILANCE-VUL-29603
curl: multiple vulnerabilities
An attacker can use several vulnerabilities of curl...
cpuoct2019, CVE-2019-5435, CVE-2019-5436, DLA-1804-1, DSA-2019-117, DSA-2019-201, DSA-4633-1, FEDORA-2019-3f5b6f0f97, FEDORA-2019-697de0501f, openSUSE-SU-2019:1492-1, openSUSE-SU-2019:1508-1, SSA:2019-142-01, SUSE-SU-2019:1357-1, SUSE-SU-2019:1357-2, SUSE-SU-2019:1363-1, SUSE-SU-2019:14064-1, USN-3993-1, USN-3993-2, VIGILANCE-VUL-29382
libcurl: out-of-bounds memory reading via SMTP End-of-Response
An attacker can force a read at an invalid address via SMTP End-of-Response of libcurl, in order to trigger a denial of service, or to obtain sensitive information...
bulletinjan2019, cpuapr2019, cpujul2019, CVE-2019-3823, DLA-1672-1, DSA-4386-1, FEDORA-2019-43489941ff, openSUSE-SU-2019:0173-1, openSUSE-SU-2019:0174-1, RHSA-2019:3701-01, SSA:2019-037-01, SUSE-SU-2019:0248-1, SUSE-SU-2019:0249-1, SUSE-SU-2019:0249-2, SUSE-SU-2019:0339-1, USN-3882-1, VIGILANCE-VUL-28445
libcurl: buffer overflow via NTLM Type-3
An attacker can trigger a buffer overflow via NTLM Type-3 of libcurl, in order to trigger a denial of service, and possibly to run code...
bulletinjan2019, bulletinoct2019, cpuapr2019, cpujul2019, CVE-2019-3822, DLA-1672-1, DSA-4386-1, FEDORA-2019-43489941ff, openSUSE-SU-2019:0173-1, openSUSE-SU-2019:0174-1, RHSA-2019:3701-01, SSA:2019-037-01, STORM-2019-002, SUSE-SU-2019:0248-1, SUSE-SU-2019:0249-1, SUSE-SU-2019:0249-2, SUSE-SU-2019:0339-1, USN-3882-1, VIGILANCE-VUL-28444
libcurl: out-of-bounds memory reading via NTLM Type-2
An attacker can force a read at an invalid address via NTLM Type-2 of libcurl, in order to trigger a denial of service, or to obtain sensitive information...
bulletinjan2019, cpuapr2019, cpujul2019, CVE-2018-16890, DLA-1672-1, DSA-4386-1, FEDORA-2019-43489941ff, K03314397, openSUSE-SU-2019:0173-1, openSUSE-SU-2019:0174-1, RHSA-2019:3701-01, SSA:2019-037-01, STORM-2019-002, SUSE-SU-2019:0248-1, SUSE-SU-2019:0249-1, SUSE-SU-2019:0249-2, SUSE-SU-2019:0339-1, USN-3882-1, VIGILANCE-VUL-28443
libcurl: out-of-bounds memory reading via Warning Message
An attacker can force a read at an invalid address via Warning Message of libcurl, in order to trigger a denial of service, or to obtain sensitive information...
bulletinoct2018, CVE-2018-16842, DLA-1568-1, DSA-2019-114, DSA-2020-030, DSA-4331-1, FEDORA-2018-298a3d2923, FEDORA-2018-69bac0f51c, FEDORA-2018-7785911c9e, FEDORA-2018-fdc4ca8675, openSUSE-SU-2018:3699-1, openSUSE-SU-2018:3706-1, RHSA-2019:2181-01, SSA:2018-304-01, STORM-2019-002, SUSE-SU-2018:3624-1, SUSE-SU-2018:3681-1, SUSE-SU-2019:0339-1, USN-3805-1, USN-3805-2, VIGILANCE-VUL-27650
libcurl: use after free via Curl_close
An attacker can force the usage of a freed memory area via Curl_close() of libcurl, in order to trigger a denial of service, and possibly to run code...
bulletinoct2018, CVE-2018-16840, DSA-2019-114, DSA-2020-030, FEDORA-2018-298a3d2923, FEDORA-2018-69bac0f51c, FEDORA-2018-7785911c9e, FEDORA-2018-fdc4ca8675, openSUSE-SU-2018:3699-1, openSUSE-SU-2018:3706-1, SSA:2018-304-01, SUSE-SU-2018:3624-1, SUSE-SU-2018:3681-1, SUSE-SU-2019:0339-1, USN-3805-1, VIGILANCE-VUL-27649
libcurl: buffer overflow via Curl_auth_create_plain_message
An attacker can generate a buffer overflow via Curl_auth_create_plain_message() of libcurl, in order to trigger a denial of service, and possibly to run code...
bulletinoct2018, CVE-2018-16839, DLA-1568-1, DSA-4331-1, FEDORA-2018-298a3d2923, FEDORA-2018-69bac0f51c, FEDORA-2018-7785911c9e, FEDORA-2018-fdc4ca8675, openSUSE-SU-2018:3706-1, SSA:2018-304-01, STORM-2019-002, SUSE-SU-2018:3624-1, SUSE-SU-2019:0339-1, SUSE-SU-2019:0996-1, USN-3805-1, VIGILANCE-VUL-27648
curl: integer overflow via Curl_ntlm_core_mk_nt_hash
An attacker can generate an integer overflow via Curl_ntlm_core_mk_nt_hash() of curl, in order to trigger a denial of service, and possibly to run code...
bulletinoct2018, CVE-2018-14618, DLA-1498-1, DSA-2019-114, DSA-4286-1, FEDORA-2018-111044d435, FEDORA-2018-ba443bcb6d, ibm10743283, openSUSE-SU-2018:2731-1, openSUSE-SU-2018:2736-1, RHSA-2018:3558-01, RHSA-2019:1880-01, SSA:2018-249-01, SUSE-SU-2018:2714-1, SUSE-SU-2018:2715-1, SUSE-SU-2018:2717-1, USN-3765-1, USN-3765-2, VIGILANCE-VUL-27143
Our database contains other pages. You can request a free trial to read them.

Display information about curl: