Поиск уязвимостей
Количество 20
Количество 20
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option known as `CURLOPT_TELNETOPTIONS` in libcurl is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables libcurl could be made to pass on uninitialized data from a stack based buffer to the server resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when th ...
openSUSE-SU-2021:1762-1
Security update for curl
openSUSE-SU-2021:0808-1
Security update for curl
SUSE-SU-2021:1763-1
Security update for curl
SUSE-SU-2021:1762-1
Security update for curl
SUSE-SU-2021:14760-1
Security update for curl
SUSE-SU-2021:14735-1
Security update for curl
GHSA-7w8r-q58w-5wcr
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
BDU:2021-03580
Уязвимость функции sscanf() библиотеки libcurl программного средства для взаимодействия с серверами CURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2021:1809-1
Security update for curl
ROS-20260529-73-0018
Уязвимость curl
ALT-PU-2021-1937
ALT-PU-2021-1937: package `MySQL` update to version 8.0.25-alt1
ELSA-2021-4511
ELSA-2021-4511: curl security and bug fix update (MODERATE)
SUSE-SU-2021:1786-1
Security update for curl
ALT-PU-2021-1865
ALT-PU-2021-1865: package `curl` update to version 7.77.0-alt1
ALT-PU-2018-3724
ALT-PU-2018-3724: package `MySQL` update to version 8.0.13-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
 | CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
 | CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
 | CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option known as `CURLOPT_TELNETOPTIONS` in libcurl is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables libcurl could be made to pass on uninitialized data from a stack based buffer to the server resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
| CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when th ... | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:1762-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| openSUSE-SU-2021:0808-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:1763-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:1762-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:14760-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| SUSE-SU-2021:14735-1 Security update for curl | 5% Низкий | больше 5 лет назад | |
| GHSA-7w8r-q58w-5wcr curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. | CVSS3: 3.1 | 5% Низкий | больше 4 лет назад |
 | BDU:2021-03580 Уязвимость функции sscanf() библиотеки libcurl программного средства для взаимодействия с серверами CURL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
| SUSE-SU-2021:1809-1 Security update for curl | больше 5 лет назад | ||
 | ROS-20260529-73-0018 Уязвимость curl | CVSS3: 3.1 | 5% Низкий | 5 месяцев назад |
| ALT-PU-2021-1937 ALT-PU-2021-1937: package `MySQL` update to version 8.0.25-alt1 | CVSS3: 3.1 | 5% Низкий | больше 5 лет назад |
| ELSA-2021-4511 ELSA-2021-4511: curl security and bug fix update (MODERATE) | почти 5 лет назад | ||
| SUSE-SU-2021:1786-1 Security update for curl | больше 5 лет назад | ||
| ALT-PU-2021-1865 ALT-PU-2021-1865: package `curl` update to version 7.77.0-alt1 | CVSS3: 8.1 | больше 5 лет назад | |
| ALT-PU-2018-3724 ALT-PU-2018-3724: package `MySQL` update to version 8.0.13-alt1 | CVSS3: 7.5 | почти 8 лет назад |
Уязвимостей на страницу