Security
فارسی
All products

Red Hat JBoss Core Services/curl

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
curl: libcurl: Curl out of bounds read for cookie pathCVE-2025-9086 Red Hat Enterprise Linux 6/curlRed Hat Enterprise Linux 7/curl Red Hat Medium No fix reported
curl: predictable WebSocket maskCVE-2025-10148 Red Hat Enterprise Linux 10/curlRed Hat JBoss Core Services/curl Red Hat Low No fix reported
curl: libssh key passphrase bypass without agent setCVE-2025-15224 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Low No fix reported
curl: Host verification bypass during SSH transfersCVE-2025-15079 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Low No fix reported
curl: libcurl: Improper certificate validation due to cached TLS settings reuseCVE-2025-14819 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Low No fix reported
curl: Information disclosure via cross-protocol redirect with OAuth2 bearer tokenCVE-2025-14524 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Low No fix reported
curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonationCVE-2025-13034 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported
curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfersCVE-2025-14017 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported
curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handlingCVE-2026-3805 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported
curl: libcurl: Credential leak via reused proxy connection during HTTP redirectsCVE-2026-6429 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported
curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headersCVE-2026-6276 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Low No fix reported
curl: libcurl: Wrong file transfer due to incorrect SMB connection reuseCVE-2026-5773 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported
curl: curl: Information disclosure due to incorrect TLS connection reuseCVE-2026-4873 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 Red Hat Medium No fix reported