LI
Product
Libcurl
5
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Libcurl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2466 | 6.5 | Mar 27 | TLS certificate check bypass with mbedTLS Affected: 8.5.0 through 8.6.0 |
| CVE-2012-0036 | – | Apr 13 | curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection… Affected: 7.20.0; 7.20.1; 7.21.0; 7.21.1; 7.21.2; 7.21.3; +7 more |
| CVE-2010-0734 | – | Mar 19 | content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic… Affected: 7.10.5; 7.10.6; 7.10.7; 7.10.8; 7.11.0; 7.11.1; +29 more |
| CVE-2009-2417 | – | Aug 14 | lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an… Affected: 7.4; 7.4.1; 7.4.2; 7.5; 7.5.1; 7.5.2; +34 more |
| CVE-2009-0037 | – | Mar 5 | The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP… Affected: 5.11; 7.12; 7.12.1; 7.12.2; 7.12.3; 7.13; +10 more |
Showing 5