Поиск уязвимостей
Количество 5
Количество 5
CVE-2016-9953
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.
CVE-2016-9953
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.
CVE-2016-9953
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30 ...
GHSA-72rm-6rfp-xgr9
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.
ALT-PU-2016-2472
ALT-PU-2016-2472: package `curl` update to version 7.52.0-alt1.S1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2016-9953 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад | |
CVE-2016-9953 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад | |
CVE-2016-9953 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30 ... | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад | |
GHSA-72rm-6rfp-xgr9 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. | CVSS3: 9.8 | 2% Низкий | больше 4 лет назад | |
ALT-PU-2016-2472 ALT-PU-2016-2472: package `curl` update to version 7.52.0-alt1.S1 | CVSS3: 9.8 | почти 10 лет назад |
Уязвимостей на страницу