Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: https://github.com/curl/curl — FEDORA-2021-fc96a3a749 Clear all filters
TI-2021-05808 CVE-2021-22947 · GHSA-94jh-wwgf-cmmc

Cryptographic flaw in https://github.com/curl/curl

Priority MEDIUM 60

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03009 Published 2021-09-29 Partial fix CWE-310
TI-2021-05807 CVE-2021-22946 · GHSA-3cmq-42w4-c529

Cleartext transmission of sensitive information in https://github.com/curl/curl

Priority HIGH 72

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLU…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04539 Published 2021-09-29 Partial fix CWE-325
TI-2021-05806 CVE-2021-22945 · GHSA-22mx-9r92-42g8

Double free in https://github.com/curl/curl

Priority MEDIUM 55

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.06677 Published 2021-09-23 Will not fix CWE-415