Red Hat Ceph Storage 2/curl

Red Hat · Package

22 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
curl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120 · GHSA-674J-7M97-J2P9	curl .NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl	NuGetRed Hat	Critical	No fix reported	2023-03-02
curl: TFTP sends more than buffer sizeCVE-2017-1000100	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: RTSP RTP buffer over-readCVE-2018-1000122	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: LDAP NULL pointer dereferenceCVE-2018-1000121	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
libcurl: partial password leak over DNS on HTTP redirectCVE-2020-8169	Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Incorrect argument check can allow remote servers to overwrite local filesCVE-2020-8177	Red Hat Ceph Storage 2/curl Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option setCVE-2020-8231	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 7/curl	Red Hat	Low	No fix reported	Not recorded
curl: Inferior OCSP verificationCVE-2020-8286	Red Hat Ceph Storage 2/curl Red Hat Software Collections/httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is usedCVE-2020-8285	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: FTP PASV command response can cause curl to connect to arbitrary hostCVE-2020-8284	Red Hat Ceph Storage 2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: TLS 1.3 session ticket mix-up with HTTPS proxy hostCVE-2021-22890	Red Hat Ceph Storage 2/curl	Red Hat	Low	No fix reported	Not recorded
curl: Leak of authentication credentials in URL via automatic RefererCVE-2021-22876	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Cipher settings shared for all connections when using schannel TLS backedCVE-2021-22897	Red Hat Ceph Storage 2/curl	Red Hat	Low	No fix reported	Not recorded
curl: TELNET stack contents disclosureCVE-2021-22898	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl .NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-curl	Red Hat	Low	No fix reported	Not recorded
curl: CURLOPT_SSLCERT mixup with Secure TransportCVE-2021-22926	Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosureCVE-2021-22925	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl .NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-curl	Red Hat	Low	No fix reported	Not recorded
curl: Bad connection reuse due to flawed path name checksCVE-2021-22924	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Metalink download sends credentialsCVE-2021-22923	Red Hat Ceph Storage 2/curl Red Hat JBoss Core Services/jbcs-httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Content not matching hash in Metalink is not being discardedCVE-2021-22922	Red Hat Ceph Storage 2/curl Red Hat JBoss Core Services/jbcs-httpd24-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Server responses received before STARTTLS processed after TLS handshakeCVE-2021-22947	.NET Core 2.1 on Red Hat Enterprise Linux/rh-dotnet21-curl Red Hat Ceph Storage 2/curl	Red Hat	Medium	No fix reported	Not recorded