Red Hat Enterprise Linux 5/curl

Red Hat · Package

31 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
curl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120 · GHSA-674J-7M97-J2P9	curl .NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl	NuGetRed Hat	Critical	No fix reported	2023-03-02
curl: re-use of wrong HTTP NTLM connection in libcurlCVE-2014-0015	Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: IP address wildcard certificate validation issue in libcurlCVE-2014-0139	Red Hat Enterprise Linux 5/curl	Red Hat	Low	No fix reported	Not recorded
curl: wrong re-use of connections in libcurlCVE-2014-0138	Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: incorrect handling of IP addresses in cookie domainCVE-2014-3613	Red Hat Enterprise Linux 5/curl Red Hat Enterprise Virtualization 3/mingw-virt-viewer	Red Hat	Medium	No fix reported	Not recorded
curl: URL request injection vulnerability in parseurlandfillconn()CVE-2014-8150	Red Hat Enterprise Linux 4/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: Negotiate not treated as connection-orientedCVE-2015-3148	Red Hat Ceph Storage 1.2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: re-using authenticated connection when unauthenticatedCVE-2015-3143	Red Hat Ceph Storage 1.2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: sensitive HTTP server headers also sent to proxiesCVE-2015-3153	Red Hat Ceph Storage 1.2/curl Red Hat Enterprise Linux 5/curl	Red Hat	Medium	No fix reported	Not recorded
curl: NTLM credentials not-checked for proxy connection re-useCVE-2016-0755	Red Hat Enterprise Linux 5/curl Red Hat Enterprise Linux 6/curl	Red Hat	Low	No fix reported	Not recorded
curl: Re-using connection with wrong client certCVE-2016-5420	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: TLS session resumption client cert bypassCVE-2016-5419	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: escape and unescape integer overflowsCVE-2016-7167	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: IDNA 2003 makes curl use wrong hostCVE-2016-8625	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Invalid URL parsing with '#'CVE-2016-8624	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Use-after-free via shared cookiesCVE-2016-8623	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: curl_getdate out-of-bounds readCVE-2016-8621	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Low	No fix reported	Not recorded
curl: Double-free in krb5 codeCVE-2016-8619	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Double-free in curl_maprintfCVE-2016-8618	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded
curl: Out-of-bounds write via unchecked multiplicationCVE-2016-8617	.NET Core 1.0 on Red Hat Enterprise Linux/rh-dotnetcore10-curl .NET Core 1.1 on Red Hat Enterprise Linux/rh-dotnetcore11-curl	Red Hat	Medium	No fix reported	Not recorded