curl / Docs / Vulnerability table / 7.65.0 vulnerabilities

Vulnerabilities in curl 7.65.0

curl version 7.65.0 was released on May 22 2019. The following 6 security problems are known to exist in this version.

FlawFrom versionTo and includingCVECWE
wrong connect-only connection7. Expired Pointer Dereference
curl overwrite local file with -J7. Improper Restriction of Names for Files and Other Resources
Partial password leak over DNS on HTTP redirect7. Exposure of Sensitive Information to an Unauthorized Actor
FTP-KRB double-free7. Double Free
TFTP small blocksize heap buffer overflow7. Heap-based Buffer Overflow
Windows OpenSSL engine code injection7. Code Injection

Changelog for curl 7.65.0

See vulnerability summary for the previous release: 7.64.1 or the subsequent release: 7.65.1