https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:27:16 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-339 certfr-2018-avi-339 https://cve.radiocsirt.org/vuln/certfr-2018-avi-339 https://cve.radiocsirt.org/vuln/cnvd-2017-16362 cnvd-2017-16362 https://cve.radiocsirt.org/vuln/cnvd-2017-16362 https://cve.radiocsirt.org/vuln/euvd-2026-75866 EUVD-2026-75866 https://cve.radiocsirt.org/vuln/euvd-2026-75866 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9502 <p>In curl before 7.54.1 on Windows and DOS, libcurl&#39;s default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given &#34;URL&#34; starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string &#34;file://&#34;).</p> <p>In curl before 7.54.1 on Windows and DOS, libcurl&#39;s default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given &#34;URL&#34; starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string &#34;file://&#34;).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9502 https://cve.radiocsirt.org/vuln/ghsa-2p6v-q44g-p7m7 <p>In curl before 7.54.1 on Windows and DOS, libcurl&#39;s default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given &#34;URL&#34; starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string &#34;file://&#34;).</p> <p>In curl before 7.54.1 on Windows and DOS, libcurl&#39;s default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given &#34;URL&#34; starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string &#34;file://&#34;).</p> https://cve.radiocsirt.org/vuln/ghsa-2p6v-q44g-p7m7 https://cve.radiocsirt.org/vuln/gsd-2017-9502 gsd-2017-9502 https://cve.radiocsirt.org/vuln/gsd-2017-9502 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10582-1 <p>curl-7.79.1-1.1 on GA media</p> <p>curl-7.79.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10582-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1648 <p>Ein lokaler Angreifer kann eine Schwachstelle in cURL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in cURL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1648