TI-2019-02834 CVE-2019-3822 · GHSA-8wr2-mqj7-7vxp
Stack-based buffer overflow in curl
Priority MEDIUM 56
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow.
RHSA-2019:3701
curl security and bug fix update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-11.el8, libcurl-7.61.1-11.el8, libcurl-devel-7.61.1-11.el8 +1
Fixes 4 records
TI-2018-12100 CVE-2018-16890 · GHSA-53fg-3j53-939q
Out-of-bounds read in curl
Priority MEDIUM 41
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read.
TI-2019-02835 CVE-2019-3823 · GHSA-xmjh-hmw3-hqhr
Out-of-bounds read in curl
Priority MEDIUM 40
libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP.
TI-2018-14520 CVE-2018-20483 · GHSA-mxm6-6r3r-6wj4
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the…
Priority LOW 35
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensit…