Known vulnerabilities in libcurl

Software: libcurl
Software CPE: cpe:2.3:a:curl_haxx_se:libcurl:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libcurl libcurl is affected by 24 known vulnerabilities: 6 high, 4 medium, 14 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17458 - Out-of-bounds read
CVE-2019-3823
CWE-125 Low
No
No
7.64.0 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 14 more
#VU17457 - Out-of-bounds read
CVE-2018-16890
CWE-125 Low
No
No
7.64.0 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 13 more
#VU17456 - Stack-based buffer overflow
CVE-2019-3822
CWE-121 High
No
No
7.64.0 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 17 more
#VU15673 - Heap-based Buffer Overflow
CVE-2018-16842
CWE-122 Low
No
No
7.62.0 01.11.2018 SB2018110105
SB2018110106
SB2018110302
and 20 more
#VU15671 - Integer overflow
CVE-2018-16839
CWE-190 High
No
No
7.62.0 01.11.2018 SB2018110105
SB2018110106
SB2018110302
and 14 more
#VU15672 - Use After Free
CVE-2018-16840
CWE-416 Low
No
No
7.62.0 01.11.2018 SB2018110105
SB2018110106
SB2018110610
and 19 more
#VU14691 - Buffer overflow
CVE-2018-14618
CWE-120 High
No
No
7.61.1 06.09.2018 SB2018090709
SB2018090710
SB2018090712
and 13 more
#VU33021 - Out-of-bounds write
CVE-2016-8622
CWE-787 High
No
No
7.51.0 31.07.2018 SB2018073120
SB2016111006
SB2016110309
and 10 more
#VU10224 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1000007
CWE-200 Low
No
No
- 25.01.2018 SB2018012508
SB2018012509
SB2018012607
and 19 more
#VU10223 - Out-of-bounds read
CVE-2018-1000005
CWE-125 Low
No
No
- 25.01.2018 SB2018012508
SB2018012509
SB2018012607
and 13 more
#VU9460 - Memory corruption
CVE-2017-8818
CWE-119 Low
No
No
- 30.11.2017 SB2017113004
SB2017113005
SB2017113019
and 5 more
#VU9459 - Out-of-bounds read
CVE-2017-8817
CWE-125 Low
No
No
- 30.11.2017 SB2017113002
SB2017113003
SB2017113004
and 14 more
#VU9458 - Memory corruption
CVE-2017-8816
CWE-119 High
No
No
- 30.11.2017 SB2017113002
SB2017113003
SB2017113004
and 12 more
#VU8917 - Buffer over-read
CVE-2017-1000257
CWE-126 Low
No
No
- 24.10.2017 SB2017102401
SB2017102402
SB2017102403
and 13 more
#VU8702 - Out-of-bounds read
CVE-2017-1000254
CWE-125 Low
No
No
- 05.10.2017 SB2017100505
SB2017100604
SB2017100605
and 15 more
#VU7884 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-1000100
CWE-601 Low
No
No
- 15.08.2017 SB2017081008
SB2017082308
SB2017100604
and 15 more
#VU7882 - Out-of-bounds read
CVE-2017-1000099
CWE-125 Low
No
No
- 15.08.2017 SB2017081008
SB2017082308
SB2017100604
and 10 more
#VU7114 - Buffer overflow
CVE-2017-9502
CWE-120 Low
No
No
- 16.06.2017 SB2017061605
SB2017061538
#VU1144 - Improper input validation
CVE-2016-8624
CWE-20 Low
No
No
- 03.11.2016 SB2016110308
SB2016111006
SB2016110309
and 13 more
#VU40952 - Improper input validation
CVE-2014-8151
CWE-20 Medium
No
No
- 15.01.2015 SB2015011504


Showing elements 1 - 20 out of 24