CU
Product
curl
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 1Low 0
Watch
Add curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3822 | 9.8 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow Affected: 7.64.0 |
| CVE-2016-8620 | 9.8 | Aug 1 | The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input Affected: 7.51.0 |
| CVE-2016-8619 | 9.8 | Aug 1 | The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free Affected: 7.51.0 |
| CVE-2016-8618 | 9.8 | Jul 31 | The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit… Affected: 7.51.0 |
| CVE-2016-8622 | 9.8 | Jul 31 | The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape` Affected: 7.51.0 |
Showing 5