curl / Docs / Vulnerability table / 4.10 vulnerabilities

Vulnerabilities in curl 4.10

Related:
Audits
Changelog
curl CVEs
Vulnerability Disclosure
Vulnerabilities Table

curl version 4.10 was released on October 26 1998

It has the following 10 published security problems.

S	Flaw	First	Last
L	CVE-2022-35252: control code in cookie denial of service	4.9	7.84.0
L	CVE-2022-27776: Auth/cookie leak on redirect	4.9	7.82.0
M	CVE-2022-27774: Credential leak on redirect	4.9	7.82.0
L	CVE-2020-8284: trusting FTP PASV responses	4.0	7.73.0
H	CVE-2016-8615: cookie injection for other servers	4.9	7.50.3
H	CVE-2016-0754: remote filename path traversal in curl tool for Windows	4.0	7.46.0
H	CVE-2015-3153: sensitive HTTP server headers also sent to proxies	4.0	7.42.0
M	CVE-2014-3613: cookie leak with IP address as domain	4.0	7.37.1
H	CVE-2013-1944: cookie domain tailmatch	4.7	7.29.0
H	CVE-2003-1605: Proxy Authentication Header Information Leakage	4.5	7.10.6

Further details

CVE data for 4.10 provided as JSON.

Changelog for curl 4.10

See vulnerability summary for the previous release: 4.9 or the subsequent release: 5.0