curl vulnerabilities

Known vulnerabilities in the curl package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Out-of-bounds Write	*
M Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Missing Authentication for Critical Function	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficient Verification of Data Authenticity	<7.52.1-5+deb9u16
H Cleartext Transmission of Sensitive Information	<7.52.1-5+deb9u16
L Insufficiently Protected Credentials	*
L Use of Incorrectly-Resolved Name or Reference	<7.52.1-5+deb9u15
L Improper Validation of Integrity Check Value	*
L Missing Initialization of Resource	<7.52.1-5+deb9u15
M Information Exposure	<7.52.1-5+deb9u14
H Improper Certificate Validation	<7.52.1-5+deb9u13
L CVE-2020-8284	<7.52.1-5+deb9u13
H Out-of-bounds Write	<7.52.1-5+deb9u13
H Use After Free	<7.52.1-5+deb9u12
H Arbitrary Code Injection	<7.52.1-5+deb9u11
C Buffer Overflow	<7.52.1-5+deb9u10
C Double Free	<7.52.1-5+deb9u10
H Out-of-bounds Write	<7.52.1-5+deb9u10
H Out-of-bounds Read	<7.52.1-5+deb9u9
C Out-of-bounds Write	<7.52.1-5+deb9u9
H Out-of-bounds Read	<7.52.1-5+deb9u9
C Out-of-Bounds	<7.52.1-5+deb9u8
C Out-of-bounds Read	<7.52.1-5+deb9u8
C Integer Overflow or Wraparound	<7.52.1-5+deb9u7
H Credentials Management	<7.10.7-1
H Improper Input Validation	<7.51.0-1
H Out-of-bounds Write	<7.51.0-1
C Double Free	<7.51.0-1
C Out-of-bounds Write	<7.51.0-1
H Use After Free	<7.51.0-1
H Out-of-bounds Read	<7.51.0-1
C Out-of-bounds Read	<7.51.0-1
H Improper Certificate Validation	<7.52.1-5
H Resource Injection	<7.51.0-1
H Improper Input Validation	<7.51.0-1
C Double Free	<7.51.0-1
M Credentials Management	<7.51.0-1
M Improper Certificate Validation	<7.52.1-3
C Out-of-bounds Read	<7.52.1-5+deb9u6
H Heap-based Buffer Overflow	<7.52.1-1
C Out-of-bounds Write	<7.52.1-5+deb9u5
H NULL Pointer Dereference	<7.52.1-5+deb9u5
C Out-of-bounds Read	<7.52.1-5+deb9u5
C Out-of-bounds Read	<7.52.1-5+deb9u4
C CVE-2018-1000007	<7.52.1-5+deb9u4
C Out-of-bounds Read	<7.52.1-5+deb9u3
C Integer Overflow or Wraparound	<7.52.1-5+deb9u3
C Out-of-Bounds	<7.52.1-5+deb9u2
H Out-of-Bounds	<7.52.1-5+deb9u1
M Out-of-Bounds	<7.52.1-5+deb9u1
M Information Exposure	<7.52.1-5+deb9u1
L Out-of-Bounds	<7.52.1-4
C Integer Overflow or Wraparound	<7.51.0-1
H Improper Authentication	<7.51.0-1
H Improper Authorization	<7.50.1-1
H Cryptographic Issues	<7.50.1-1
H Use After Free	<7.50.1-1
L Improper Input Validation	<7.50.1-1
H Improper Authentication	<7.47.0-1
M Improper Input Validation	<7.43.0-1
M Information Exposure	<7.43.0-1
M Information Exposure	<7.42.1-1
M Access Restriction Bypass	<7.42.0-1
H Out-of-Bounds	<7.42.0-1
M Improper Access Control	<7.42.0-1
H Out-of-Bounds	<7.42.0-1
M CVE-2014-8150	<7.38.0-4
M Cryptographic Issues	<7.38.0-1
M Cryptographic Issues	<7.38.0-1
M Information Exposure	<7.38.0-3
M Improper Authentication	<7.36.0-1
M Cryptographic Issues	<7.36.0-1
M Improper Authentication	<7.35.0-1
M Improper Input Validation	<7.34.0-1
M Cryptographic Issues	<7.33.0-1
M Out-of-Bounds	<7.31.0-1
M Information Exposure	<7.29.0-2.1
H Out-of-Bounds	<7.29.0-1
H SQL Injection	<7.24.0-1
M Improper Input Validation	<7.24.0-1
H Credentials Management	<7.21.6-2
L Access Restriction Bypass	<7.20.0-1
M Cryptographic Issues	<7.19.5-1.1
M Cross-site Request Forgery (CSRF)	<7.18.2-8.1
L CVE-2007-3564	<7.16.4-1
H CVE-2006-1061	<7.15.3-1
M Numeric Errors	<7.15.1-1
M Out-of-Bounds	<7.15.0-1
H CVE-2005-0490	<7.13.0-2

Vulnerability

Vulnerable Version

Out-of-bounds Write