Vulnerabilidades de Haxx

CVE-2020-8286 Alta · 7.5 CWE-295 14/12/2020

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

CVE-2020-8177 Alta · 7.8 CWE-74 14/12/2020

Injection em Haxx Curl

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

CVE-2020-8285 Alta · 7.5 CWE-674 14/12/2020

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

CVE-2020-8284 Baixa · 3.7 CWE-200 14/12/2020

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

CVE-2020-8231 Alta · 7.5 CWE-416 14/12/2020

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

CVE-2020-8169 Alta · 7.5 CWE-200 14/12/2020

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

CVE-2019-5482 Crítica · 9.8 CWE-787 16/09/2019

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

CVE-2019-5481 Crítica · 9.8 CWE-415 16/09/2019

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

CVE-2019-5443 Alta · 7.8 CWE-427 02/07/2019

A non-privileged user or program can put code and a config file in a known non-privileged path ...

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.

CVE-2019-5436 Alta · 7.8 CWE-787 28/05/2019

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

CVE-2019-5435 Baixa · 3.7 CWE-190 28/05/2019

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

CVE-2018-1000007 Crítica · 9.8 24/01/2018

libcurl: vazamento de cabeçalhos de autenticação em redirecionamentos

libcurl 7.1 até 7.57.0 pode vazar acidentalmente dados de autenticação para terceiros. Quando solicitado a enviar cabeçalhos personalizados em suas requisições HTTP, o libcurl envia esse conjunto de cabeçalhos primeiro ao host da URL inicial, mas também, se solicitado a seguir redirecionamentos e uma resposta HTTP 30X for retornada, ao host mencionado na URL no valor do cabeçalho de resposta Location:. Enviar o mesmo conjunto de cabeçalhos a hosts subsequentes é um problema particular para aplicações que repassam cabeçalhos Authorization: personalizados, já que esse cabeçalho frequentemente contém informações sensíveis de privacidade ou dados que podem permitir que outros se passem pela requisição do cliente que usa libcurl.

CVE-2011-3389 Média · 4.3 Exploit público CWE-326 06/09/2011

Inadequate Encryption Strength em Google Chrome

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.