TI-2022-13918 CVE-2022-32208 · GHSA-gfg8-2cqc-6cmc
Out-of-bounds write in https://github.com/curl/curl
Priority MEDIUM 60
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.
Vulnerabilities
4 records
TI-2022-13917 CVE-2022-32207 · GHSA-mvxp-vg38-gq5c
Incorrect default permissions in https://github.com/curl/curl
Priority HIGH 82
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation…
TI-2022-13916 CVE-2022-32206 · GHSA-pphv-gw4r-gww8
Resource allocation without limits in https://github.com/curl/curl
Priority MEDIUM 62
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.
TI-2022-13915 CVE-2022-32205 · GHSA-9hhr-r3j8-h675
Resource allocation without limits in https://github.com/curl/curl
Priority MEDIUM 53
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them.