Vulnerabilities

TI-2009-02306 CVE-2009-2417 · GHSA-c74q-xg62-9cwm

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not…

LOW 39

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03461 Published 2009-08-14 Fixed CWE-310

TI-2007-03457 CVE-2007-3564 · GHSA-83vp-5vg4-r3g7

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS…

LOW 37

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02297 Published 2007-07-18 No fix listed

TI-2005-03012 CVE-2005-3185 · GHSA-pr2f-jh2p-p39m

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10…

MEDIUM 41

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote s…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05188 Published 2005-10-13 Fixed CWE-119

Vulnerabilities

Filters

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not…

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS…

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10…