Red Hat Software Collections/httpd24-curl

Red Hat · Package

30 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
curl: URL globbing out of bounds readCVE-2017-1000101	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: Heap-based buffer over-read in the curl tool warning formattingCVE-2018-16842	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: Use-after-free when closing "easy" handle in Curl_close()CVE-2018-16840	Red Hat JBoss Core Services/jbcs-httpd24-curl Red Hat Software Collections/httpd24-curl	Red Hat	Low	No fix reported	Not recorded
curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()CVE-2018-16839	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: SMTP end-of-response out-of-bounds readCVE-2019-3823	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: NTLMv2 type-3 header stack buffer overflowCVE-2019-3822	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: NTLM type-2 heap out-of-bounds buffer readCVE-2018-16890	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: TFTP receive heap buffer overflow in tftp_receive_packet() functionCVE-2019-5436	Red Hat Enterprise Linux 6/curl Red Hat JBoss Core Services/jbcs-httpd24-curl	Red Hat	Low	No fix reported	Not recorded
curl: heap buffer overflow in function tftp_receive_packet()CVE-2019-5482	Red Hat Enterprise Linux 6/curl Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: double free due to subsequent call of realloc()CVE-2019-5481	Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Incorrect argument check can allow remote servers to overwrite local filesCVE-2020-8177	Red Hat Ceph Storage 2/curl Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option setCVE-2020-8231	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 7/curl	Red Hat	Low	No fix reported	Not recorded
curl: Inferior OCSP verificationCVE-2020-8286	Red Hat Ceph Storage 2/curl Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is usedCVE-2020-8285	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: FTP PASV command response can cause curl to connect to arbitrary hostCVE-2020-8284	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Leak of authentication credentials in URL via automatic RefererCVE-2021-22876	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: TELNET stack contents disclosureCVE-2021-22898	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl .NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-curl	Red Hat	Low	No fix reported	Not recorded
curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosureCVE-2021-22925	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl .NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-curl	Red Hat	Low	No fix reported	Not recorded
curl: Bad connection reuse due to flawed path name checksCVE-2021-22924	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Server responses received before STARTTLS processed after TLS handshakeCVE-2021-22947	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded