curl / Docs / Vulnerability table / 7.50.1 vulnerabilities

Vulnerabilities in curl 7.50.1

curl version 7.50.1 was released on August 3 2016

It has the following 92 published security problems.

S	Flaw	First	Last
M	CVE-2026-11856: cross-origin Digest auth state leak	7.10.6	8.20.0
L	CVE-2026-8932: incomplete mTLS config matching in conn reuse	7.7	8.20.0
M	CVE-2026-8927: env-set cross-proxy Digest auth state leak	7.12.0	8.20.0
L	CVE-2026-8924: trailing dot domain super cookie	7.46.0	8.20.0
L	CVE-2026-8458: wrong reuse for different services	7.43.0	8.20.0
L	CVE-2026-8286: wrong STARTTLS connection reuse	7.30.0	8.20.0
M	CVE-2026-7168: cross-proxy Digest auth state leak	7.12.0	8.19.0
M	CVE-2026-6429: netrc credential leak with reused proxy connection	7.14.0	8.19.0
M	CVE-2026-6253: proxy credentials leak over redirect-to proxy	7.14.1	8.19.0
L	CVE-2026-5773: wrong reuse of SMB connection	7.40.0	8.19.0
M	CVE-2026-5545: wrong reuse of HTTP Negotiate connection	7.10.6	8.19.0
L	CVE-2026-4873: connection reuse ignores TLS requirement	7.20.0	8.19.0
L	CVE-2026-3784: wrong proxy connection reuse with credentials	7.7	8.18.0
M	CVE-2026-3783: token leak with redirect and netrc	7.33.0	8.18.0
M	CVE-2026-1965: bad reuse of HTTP Negotiate connection	7.10.6	8.18.0
L	CVE-2025-14524: bearer token leak on cross-protocol redirect	7.33.0	8.17.0
M	CVE-2025-14017: broken TLS options for threaded LDAPS	7.17.0	8.17.0
L	CVE-2025-0725: gzip integer overflow	7.10.5	8.11.1
M	CVE-2024-8096: OCSP stapling bypass with GnuTLS	7.41.0	8.9.1
L	CVE-2024-7264: ASN.1 date parser overread	7.32.0	8.9.0
M	CVE-2024-2398: HTTP/2 push headers memory-leak	7.44.0	8.6.0
M	CVE-2023-46218: cookie mixed case PSL bypass	7.46.0	8.4.0
L	CVE-2023-38546: cookie injection with none file	7.9.1	8.3.0
L	CVE-2023-28322: more POST-after-PUT confusion	7.7	8.0.1
L	CVE-2023-28321: IDN wildcard match	7.12.0	8.0.1
L	CVE-2023-28320: siglongjmp race condition	7.9.8	8.0.1
L	CVE-2023-27538: SSH connection too eager reuse still	7.16.1	7.88.1
L	CVE-2023-27536: GSS delegation too eager connection reuse	7.22.0	7.88.1
M	CVE-2023-27535: FTP too eager connection reuse	7.13.0	7.88.1
L	CVE-2023-27534: SFTP path ~ resolving discrepancy	7.18.0	7.88.1
L	CVE-2023-27533: TELNET option IAC injection	7.7	7.88.1
L	CVE-2022-43552: HTTP Proxy deny use after free	7.16.0	7.86.0
M	CVE-2022-32221: POST following PUT confusion	7.7	7.85.0
L	CVE-2022-35252: control code in cookie denial of service	4.9	7.84.0
L	CVE-2022-32208: FTP-KRB bad message verification	7.16.4	7.83.1
M	CVE-2022-27782: TLS and SSH connection too eager reuse	7.16.1	7.83.0
L	CVE-2022-27781: CERTINFO never-ending busy-loop	7.34.0	7.83.0
L	CVE-2022-27776: Auth/cookie leak on redirect	4.9	7.82.0
M	CVE-2022-27774: Credential leak on redirect	4.9	7.82.0
M	CVE-2022-22576: OAUTH2 bearer bypass in connection reuse	7.33.0	7.82.0
M	CVE-2021-22947: STARTTLS protocol injection via MITM	7.20.0	7.78.0
M	CVE-2021-22946: Protocol downgrade required TLS bypassed	7.20.0	7.78.0
M	CVE-2021-22926: CURLOPT_SSLCERT mix-up with Secure Transport	7.33.0	7.77.0
M	CVE-2021-22925: TELNET stack contents disclosure again	7.7	7.77.0
M	CVE-2021-22924: Bad connection reuse due to flawed path name checks	7.10.4	7.77.0
M	CVE-2021-22923: Metalink download sends credentials	7.27.0	7.77.0
M	CVE-2021-22922: Wrong content via Metalink not discarded	7.27.0	7.77.0
M	CVE-2021-22898: TELNET stack contents disclosure	7.7	7.76.1
L	CVE-2021-22876: Automatic referer leaks credentials	7.1.1	7.75.0
M	CVE-2020-8286: Inferior OCSP verification	7.41.0	7.73.0
M	CVE-2020-8285: FTP wildcard stack overflow	7.21.0	7.73.0
L	CVE-2020-8284: trusting FTP PASV responses	4.0	7.73.0
L	CVE-2020-8231: wrong connect-only connection	7.29.0	7.71.1
M	CVE-2020-8177: curl overwrite local file with -J	7.20.0	7.70.0
M	CVE-2019-5482: TFTP small blocksize heap buffer overflow	7.19.4	7.65.3
H	CVE-2019-5443: Windows OpenSSL engine code injection	7.44.0	7.65.1
L	CVE-2019-5436: TFTP receive buffer overflow	7.19.4	7.64.1
M	CVE-2018-16890: NTLM type-2 out-of-bounds buffer read	7.36.0	7.63.0
H	CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow	7.36.0	7.63.0
L	CVE-2019-3823: SMTP end-of-response out-of-bounds read	7.34.0	7.63.0
L	CVE-2018-16842: warning message out-of-buffer read	7.14.1	7.61.1
L	CVE-2018-16839: SASL password overflow via integer overflow	7.33.0	7.61.1
H	CVE-2018-14618: NTLM password overflow via integer overflow	7.15.4	7.61.0
M	CVE-2018-1000301: RTSP bad headers buffer over-read	7.20.0	7.59.0
M	CVE-2018-1000122: RTSP RTP buffer over-read	7.20.0	7.58.0
L	CVE-2018-1000121: LDAP NULL pointer dereference	7.21.0	7.58.0
H	CVE-2018-1000120: FTP path trickery leads to NIL byte out of bounds write	7.12.3	7.58.0
L	CVE-2018-1000007: HTTP authentication leak in redirects	6.0	7.57.0
L	CVE-2018-1000005: HTTP/2 trailer out-of-bounds read	7.49.0	7.57.0
M	CVE-2017-8817: FTP wildcard out of bounds read	7.21.0	7.56.1
M	CVE-2017-8816: NTLM buffer overflow via integer overflow	7.36.0	7.56.1
M	CVE-2017-1000257: IMAP FETCH response out of bounds read	7.20.0	7.56.0
M	CVE-2017-1000254: FTP PWD response parser out of bounds read	7.7	7.55.1
M	CVE-2017-1000101: URL globbing out of bounds read	7.34.0	7.54.1
H	CVE-2017-1000100: TFTP sends more than buffer size	7.15.0	7.54.1
M	CVE-2017-7407: --write-out out of buffer read	6.5	7.53.1
M	CVE-2016-9586: printf floating point buffer overflow	5.4	7.51.0
M	CVE-2016-9952: Win CE Schannel cert wildcard matches too much	7.27.0	7.51.0
M	CVE-2016-9953: Win CE Schannel cert name out of buffer read	7.27.0	7.51.0
H	CVE-2016-8615: cookie injection for other servers	4.9	7.50.3
M	CVE-2016-8616: case insensitive password comparison	7.7	7.50.3
M	CVE-2016-8617: OOB write via unchecked multiplication	7.8.1	7.50.3
M	CVE-2016-8618: double free in curl_maprintf	5.4	7.50.3
H	CVE-2016-8619: double free in krb5 code	7.3	7.50.3
M	CVE-2016-8620: glob parser write/read out of bounds	7.34.0	7.50.3
M	CVE-2016-8621: curl_getdate read out of bounds	7.12.2	7.50.3
M	CVE-2016-8622: URL unescape heap overflow via integer truncation	7.24.0	7.50.3
H	CVE-2016-8623: Use after free via shared cookies	7.10.7	7.50.3
M	CVE-2016-8624: invalid URL parsing with '#'	6.0	7.50.3
H	CVE-2016-8625: IDNA 2003 makes curl use wrong host	7.12.0	7.50.3
M	CVE-2016-7167: curl escape and unescape integer overflows	7.11.1	7.50.2
H	CVE-2016-7141: Incorrect reuse of client certificates	7.19.6	7.50.1

Further details

CVE data for 7.50.1 provided as JSON.

Changelog for curl 7.50.1

See vulnerability summary for the previous release: 7.50.0 or the subsequent release: 7.50.2