Latest haxx curl Vulnerabilities

● CVE-2024-0853

OCSP verification bypass with TLS session reuse

=8.5.0

● CVE-2023-46219

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Haxx Curl>=7.84.0<8.5.0

Fedoraproject Fedora=38

ubuntu/curl<8.5.0

ubuntu/curl<7.88.1-8ubuntu2.4

ubuntu/curl<8.2.1-1ubuntu3.2

redhat/curl<8.5.0

and 1 more

● CVE-2023-46218

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that the...

Haxx Curl>=7.46.0<=8.4.0

Fedoraproject Fedora=39

ubuntu/curl<7.47.0-1ubuntu2.19+

ubuntu/curl<7.58.0-2ubuntu3.24+

ubuntu/curl<8.5.0

ubuntu/curl<7.68.0-1ubuntu2.21

and 5 more

● CVE-2023-38039

curl: HTTP headers eat all memory

Microsoft Windows 11=21H2

Microsoft Windows 11=22H2

Microsoft Windows 11=21H2

Microsoft Windows Server 2019

Microsoft Windows 11=23H2

Microsoft Windows 11=22H2

and 57 more

● CVE-2020-19909

** DISPUTED ** Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user;...

Haxx Curl=7.65.2

● CVE-2023-28320

A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous ...

Haxx Curl<8.1.0

Apple macOS>=11.0<11.7.9

Apple macOS>=12.0<12.6.8

Apple macOS>=13.0<13.5

NetApp Clustered Data ONTAP

Apple macOS Big Sur

and 13 more

● CVE-2023-28322

An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when...

Haxx Curl<8.1.0

Fedoraproject Fedora=37

Fedoraproject Fedora=38

Apple macOS>=11.0<11.7.9

Apple macOS>=12.0<12.6.8

Apple macOS>=13.0<13.5

and 34 more

● CVE-2023-28321

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl ...

Haxx Curl<8.1.0

Debian Debian Linux=10.0

Fedoraproject Fedora=37

Fedoraproject Fedora=38

NetApp Clustered Data ONTAP

Apple macOS Big Sur

and 35 more

● CVE-2023-28319

A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memor...

Haxx Curl<8.1.0

Apple macOS>=11.0<11.7.9

Apple macOS>=12.0<12.6.8

Apple macOS>=13.0<13.5

NetApp Clustered Data ONTAP

Apple macOS Big Sur

and 14 more

● CVE-2023-27534

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its inten...

Haxx Curl>=7.18.0<=7.88.1

Fedoraproject Fedora=36

Apple iPadOS

Broadcom Brocade Fabric Operating System Firmware

Apple macOS Ventura

Apple macOS Big Sur

and 20 more

● CVE-2023-27533

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server...

Haxx Curl>=7.0.0<=7.881

Fedoraproject Fedora=36

Apple iPadOS

NetApp Clustered Data ONTAP=9.0

Apple macOS Ventura

Apple macOS Big Sur

and 20 more

● CVE-2023-23916

cURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain implementation. By sending a specially-crafted request, a remote attacker could exploit this vulnerabilit...

Haxx Curl>=7.57.0<7.88.0

Fedoraproject Fedora=36

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Apple macOS Ventura

Apple macOS Big Sur

and 22 more

● CVE-2023-23915

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using it...

Haxx Curl>=7.77.0<7.88.0

Apple iPadOS

NetApp Clustered Data ONTAP=9.0

Apple macOS Ventura

Apple macOS Big Sur

and 19 more

● CVE-2023-23914

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl...

Haxx Curl>=7.77.0<7.88.0

Apple iPadOS

NetApp Clustered Data ONTAP=9.0

Apple macOS Ventura

Apple macOS Big Sur

and 19 more

● CVE-2022-43552

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operati...

Microsoft CBL Mariner 1.0 x64

Microsoft CBL Mariner 2.0 x64

Microsoft CBL Mariner 1.0 ARM

Microsoft CBL Mariner 2.0 ARM

redhat/jbcs-httpd24-curl<0:8.0.1-1.el8

redhat/jbcs-httpd24-curl<0:8.0.1-1.el7

and 32 more

● CVE-2022-43551

A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-...

redhat/jbcs-httpd24-curl<0:8.0.1-1.el8

redhat/jbcs-httpd24-curl<0:8.0.1-1.el7

Haxx Curl>=7.77.0<7.87.0

Fedoraproject Fedora=37

Apple iPadOS

Apple watchOS

and 10 more

● CVE-2022-35260

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based...

Haxx Curl>=7.84.0<7.86.0

NetApp Clustered Data ONTAP

Apple macOS Ventura

Apple macOS Big Sur

Apple macOS Ventura

and 18 more

● CVE-2022-42916

A vulnerability was found in curl. The issue occurs because curl's HSTS check can be bypassed to trick it to keep using HTTP. Using its HSTS support, it can instruct curl to use HTTPS directly instead...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

Haxx Curl>=7.77.0<7.86.0

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Fedoraproject Fedora=37

and 8 more

● CVE-2022-42915

A vulnerability was found in curl. The issue occurs if curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL. It sets up the connection to the remote server by issuing a `CONNECT` re...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

Haxx Curl>=7.77.0<7.86.0

Fedoraproject Fedora=35

Fedoraproject Fedora=36

Fedoraproject Fedora=37

and 25 more

● CVE-2022-32221

A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CU...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

redhat/curl<0:7.76.1-19.el9_1.1

redhat/curl<0:7.76.1-14.el9_0.6

debian/curl<=7.64.0-4+deb10u2

Haxx Curl<7.86.0

and 27 more

● CVE-2022-35252

A vulnerability found in curl. This security flaw happens when curl is used to retrieve and parse cookies from an HTTP(S) server, where it accepts cookies using control codes (byte values below 32), a...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

redhat/curl<0:7.61.1-30.el8

redhat/curl<0:7.76.1-23.el9

Haxx Curl<7.85.0

NetApp Clustered Data ONTAP

and 33 more

● CVE-2022-32205

A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HT...

debian/curl

Haxx Curl>=7.71.0<7.84.0

Fedoraproject Fedora=35

Debian Debian Linux=11.0

NetApp Clustered Data ONTAP

Netapp Element Software

and 47 more

● CVE-2022-32208

curl. Multiple issues were addressed by updating to curl version 7.84.0.

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

redhat/curl<0:7.61.1-22.el8_6.4

redhat/curl<0:7.76.1-14.el9_0.5

debian/curl<=7.64.0-4+deb10u2

Haxx Curl>=7.16.4<7.84.0

and 33 more

● CVE-2022-32207

curl. Multiple issues were addressed by updating to curl version 7.84.0.

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

redhat/curl<0:7.76.1-14.el9_0.5

debian/curl

Haxx Curl>=7.69.0<7.84.0

Fedoraproject Fedora=35

and 31 more

● CVE-2022-32206

A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited nu...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

redhat/curl<0:7.61.1-22.el8_6.4

redhat/curl<0:7.61.1-18.el8_4.3

redhat/curl<0:7.76.1-14.el9_0.5

debian/curl<=7.64.0-4+deb10u2

and 57 more

● CVE-2022-30115

Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host...

Haxx Curl>=7.82.0<7.83.1

Netapp Hci Bootstrap Os

Netapp Hci Compute Node

NetApp Clustered Data ONTAP

IBM Cloud Pak for Business Automation

and 21 more

● CVE-2022-27780

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.Fo...

Haxx Curl>=7.80.0<7.83.1

Netapp Hci Bootstrap Os

Netapp Hci Compute Node

NetApp Clustered Data ONTAP

IBM Cloud Pak for Business Automation

and 21 more

● CVE-2022-27779

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt w...

Haxx Curl>=7.82.0<7.83.1

Netapp Hci Bootstrap Os

Netapp Hci Compute Node

NetApp Clustered Data ONTAP

IBM Cloud Pak for Business Automation

and 22 more

● CVE-2022-27782

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection po...

debian/curl<=7.64.0-4+deb10u2

Haxx Curl<7.83.1

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Splunk Universal Forwarder>=8.2.0<8.2.12

Splunk Universal Forwarder>=9.0.0<9.0.6

and 1 more

● CVE-2022-27778

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

Haxx Curl=7.83.0

Apple iPadOS

Apple watchOS

NetApp Clustered Data ONTAP

NetApp OnCommand Insight

NetApp OnCommand Workflow Automation

and 27 more

● CVE-2022-27781

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make lib...

redhat/jbcs-httpd24-curl<0:7.86.0-2.el8

redhat/jbcs-httpd24-curl<0:7.86.0-2.el7

debian/curl<=7.64.0-4+deb10u2

redhat/curl<7.83.1

Haxx Curl<7.83.1

Debian Debian Linux=10.0

and 28 more

● CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was aut...

debian/curl<=7.64.0-4+deb10u2

debian/curl<=7.82.0-2<=7.74.0-1.3+deb11u1<=7.64.0-4+deb10u2

Haxx Curl>=7.33.0<7.83.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

NetApp Clustered Data ONTAP

and 26 more

● CVE-2022-27774

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is u...

debian/curl<=7.64.0-4+deb10u2

debian/curl<=7.64.0-4+deb10u2<=7.74.0-1.3+deb11u1<=7.82.0-2

Haxx Curl>=4.9<=7.82.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Netapp Hci Bootstrap Os

and 26 more

● CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a conne...

debian/curl

debian/curl<=7.74.0-1.3+deb11u1<=7.82.0-2

Haxx Curl>=7.65.0<=7.82.0

Debian Debian Linux=11.0

Netapp Hci Bootstrap Os

Netapp Hci Compute Node

and 25 more

● CVE-2022-27776

A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

debian/curl<=7.64.0-4+deb10u2

debian/curl<=7.74.0-1.3+deb11u1<=7.64.0-4+deb10u2<=7.82.0-2

Haxx Curl<7.83.0

Fedoraproject Fedora=36

Fedoraproject Fedora=37

Debian Debian Linux=10.0

and 28 more

● CVE-2021-22947

curl. Multiple issues were addressed by updating to curl version 7.79.1.

redhat/rh-dotnet31-curl<0:7.61.1-22.el7_9

redhat/curl<0:7.61.1-18.el8_4.2

redhat/curl<0:7.61.1-12.el8_2.4

debian/curl<=7.64.0-4+deb10u2

Apple macOS Monterey<12.3

redhat/curl<7.79.0

and 62 more

● CVE-2021-22946

curl. Multiple issues were addressed by updating to curl version 7.79.1.

redhat/rh-dotnet31-curl<0:7.61.1-22.el7_9

redhat/curl<0:7.61.1-18.el8_4.2

redhat/curl<0:7.61.1-12.el8_2.4

debian/curl<=7.64.0-4+deb10u2

Apple macOS Monterey<12.3

IBM QRadar SIEM<=7.5.0 GA

and 68 more

● CVE-2021-22926

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is buil...

Haxx Curl>=7.33.0<7.78.0

Apple iPadOS

Apple watchOS

NetApp Clustered Data ONTAP

Netapp Hci Management Node

NetApp OnCommand Insight

and 40 more

● CVE-2021-22923

A flaw was found in curl in the way curl handles credentials when downloading content using the Metalink feature. This flaw allows malicious actors controlling a hosting server to gain access to crede...

redhat/curl<0:7.61.1-18.el8_4.1

redhat/curl<0:7.61.1-12.el8_2.3

Haxx Curl>=7.27.0<7.78.0

Fedoraproject Fedora=33

Netapp Cloud Backup

NetApp Clustered Data ONTAP

and 37 more

● CVE-2021-22922

A flaw was found in curl in the way curl handles a file hash mismatch after downloading content using the Metalink feature. This flaw allows malicious actors controlling a hosting server to trick user...

redhat/curl<0:7.61.1-18.el8_4.1

redhat/curl<0:7.61.1-12.el8_2.3

Haxx Curl>=7.27.0<7.78.0

Fedoraproject Fedora=33

Netapp Cloud Backup

NetApp Clustered Data ONTAP

and 37 more

● CVE-2021-22897

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The se...

Haxx Curl>=7.61.0<=7.76.1

Oracle Communications Cloud Native Core Binding Support Function=1.11.0

Oracle Communications Cloud Native Core Network Function Cloud Native Environment=1.10.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.1

Oracle Communications Cloud Native Core Network Slice Selection Function=1.8.0

and 45 more

● CVE-2021-22925

A flaw was found in the way curl handled telnet protocol option for sending environment variables, which could lead to sending of uninitialized data from a stack-based buffer to the server. This issue...

redhat/curl<0:7.61.1-22.el8

Haxx Curl>=7.7<7.78.0

Fedoraproject Fedora=33

Netapp Cloud Backup

NetApp Clustered Data ONTAP

Netapp Hci Management Node

and 60 more

● CVE-2021-22898

cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw in the option parser for sending NEW_ENV variables. By sending a specially-crafted request using a clear-te...

redhat/curl<0:7.61.1-22.el8

debian/curl<=7.64.0-4+deb10u2

debian/curl<=7.74.0-1.2<=7.64.0-4<=7.64.0-4+deb10u2<=7.64.0-4+deb10u1

Haxx Curl>=7.7<=7.76.1

Debian Debian Linux=9.0

Fedoraproject Fedora=33

and 19 more

● CVE-2021-22901

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was pe...

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 68 more

● CVE-2020-8284

curl. This issue was addressed with improved checks.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 113 more

● CVE-2020-8177

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

debian/curl

debian/curl<=7.68.0-1<=7.52.1-1<=7.52.1-5+deb9u10<=7.64.0-4+deb10u1<=7.64.0-1

IBM Cloud Pak for Security (CP4S)<=1.7.2.0

IBM Cloud Pak for Security (CP4S)<=1.7.1.0

IBM Cloud Pak for Security (CP4S)<=1.7.0.0

Haxx Curl>=7.20.0<=7.70.0

and 47 more

● CVE-2020-8169

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 24 more

● CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass s...

Haxx Curl<7.49.1

Apple Mac OS X<10.12.0

● CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

debian/curl

debian/curl<=7.52.1-5+deb9u9<=7.64.0-4<=7.65.3-1<=7.52.1-1

Haxx Curl>=7.52.0<=7.65.3

Fedoraproject Fedora=29

Fedoraproject Fedora=30

Fedoraproject Fedora=31

and 20 more

● CVE-2019-5443

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") o...

Haxx Curl<=7.65.1

Microsoft Windows

Oracle Enterprise Manager Ops Center=12.3.3

Oracle Enterprise Manager Ops Center=12.4.0

Oracle HTTP Server=12.2.1.3.0

Oracle HTTP Server=12.2.1.4.0

and 8 more

Latest haxx curl Vulnerabilities

Company

Resources

Contact