Known vulnerabilities in curl - page 5

Software: curl
Software CPE: cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 137
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 137 known vulnerabilities: 18 high, 64 medium, 55 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53589 - Use After Free
CVE-2021-22901
CWE-416 High
No
No
7.76.1-3.fc34 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890
CWE-300 Medium
No
No
7.69.1-8.fc32, 7.71.1-9.fc33, 7.76.0-1.fc34 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
7.69.1-8.fc32, 7.71.1-9.fc33, 7.76.0-1.fc34 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286
CWE-299 Medium
No
No
7.69.1-7.fc32, 7.71.1-8.fc33 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
7.69.1-7.fc32, 7.71.1-8.fc33 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
7.69.1-7.fc32, 7.71.1-8.fc33 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU45794 - Expired pointer dereference
CVE-2020-8231
CWE-825 Low
No
No
7.66.0-3.fc31, 7.69.1-5.fc32 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more
#VU29292 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8169
CWE-200 Medium
No
No
7.66.0-2.fc31, 7.69.1-4.fc32 25.06.2020 SB2020062513
SB2020062514
SB2020063017
and 14 more
#VU29290 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2020-8177
CWE-644 Low
No
No
7.66.0-2.fc31, 7.69.1-4.fc32 25.06.2020 SB2020062511
SB2020062514
SB2020063002
and 27 more
#VU21059 - Heap-based Buffer Overflow
CVE-2019-5482
CWE-122 Medium
No
No
7.61.1-12.fc29, 7.65.3-4.fc30, 7.66.0-1.fc31 11.09.2019 SB2019091142
SB2019091143
SB2019091201
and 28 more
#VU21058 - Double Free
CVE-2019-5481
CWE-415 Low
No
No
7.61.1-12.fc29, 7.65.3-4.fc30, 7.66.0-1.fc31 11.09.2019 SB2019091142
SB2019091143
SB2019091201
and 12 more
#VU18583 - Integer overflow
CVE-2019-5435
CWE-190 Medium
No
No
7.61.1-11.fc29, 7.64.0-7.fc30 23.05.2019 SB2019052304
SB2019052305
SB2019052306
and 9 more
#VU18582 - Heap-based Buffer Overflow
CVE-2019-5436
CWE-122 High
No
No
7.61.1-11.fc29, 7.64.0-7.fc30 23.05.2019 SB2019052304
SB2019052305
SB2019052306
and 21 more
#VU17458 - Out-of-bounds read
CVE-2019-3823
CWE-125 Low
No
No
7.61.1-8.fc29 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 14 more
#VU17457 - Out-of-bounds read
CVE-2018-16890
CWE-125 Low
No
No
7.61.1-8.fc29 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 13 more
#VU17456 - Stack-based buffer overflow
CVE-2019-3822
CWE-121 High
No
No
7.61.1-8.fc29 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 17 more
#VU16783 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20483
CWE-200 Low
No
No
7.61.1-7.fc29 02.01.2019 SB2018122510
SB2019011803
SB2019020808
and 9 more
#VU15673 - Heap-based Buffer Overflow
CVE-2018-16842
CWE-122 Low
No
No
7.59.0-8.fc28, 7.59.0-9.fc28, 7.61.1-4.fc29, 7.61.1-5.fc29 01.11.2018 SB2018110105
SB2018110106
SB2018110302
and 20 more
#VU15671 - Integer overflow
CVE-2018-16839
CWE-190 High
No
No
7.59.0-8.fc28, 7.61.1-4.fc29 01.11.2018 SB2018110105
SB2018110106
SB2018110302
and 14 more
#VU15672 - Use After Free
CVE-2018-16840
CWE-416 Low
No
No
7.59.0-8.fc28, 7.61.1-4.fc29 01.11.2018 SB2018110105
SB2018110106
SB2018110610
and 19 more


Showing elements 81 - 100 out of 137