haxx libcurl Schwachstellen (CVE)

Für haxx libcurl veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
7.3Hoch
CVE-2025-0725

gzip integer overflow

curl curl; Siemens RUGGEDCOM RST2428P; Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family; Siemens SCALANCE XCH328

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

1.8%EPSS
5.9Mittel
CVE-2023-27537
https://github.com/curl/curl; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP; Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP; Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentatio…

1.9%EPSS
7.5Hoch
CVE-2020-8231
https://github.com/curl/curl; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP; Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP; Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

5.3%EPSS