Approved changes feed: RSS · Atom
cpe:2.3:a:curl:curl:7.4:*:*:*:*:*:*:*
part: a version: 7.4 update: *
| Vendor | Curl (f1264d7a-feb5-5e95-9b5b-0e87832c5d3c) |
|---|---|
| Product | Curl (213b6b69-3a1a-50bd-a9e1-39ebe4fefa08) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/curl |
purl2cpe | 2026-06-01 10:13:16.968592 |
pkg:deb/ubuntu/curl |
purl2cpe | 2026-06-01 10:13:16.968594 |
pkg:github/curl/curl |
purl2cpe | 2026-06-01 10:13:16.968596 |
pkg:rpm/fedora/curl |
purl2cpe | 2026-06-01 10:13:16.968597 |
pkg:rpm/opensuse/curl |
purl2cpe | 2026-06-01 10:13:16.968599 |
pkg:sourceforge/curl.mirror |
purl2cpe | 2026-06-01 10:13:16.968601 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2398 |
vulnerable | 2026-06-08 06:33:31.014722 |
HTTP/2 push headers memory-leak
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.
Published: 2024-03-27T07:55:48.524Z
Updated: 2025-02-13T17:40:07.893Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0037 |
vulnerable | 2026-06-08 04:51:07.160343 |
Details available
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
Published: 2009-03-05T02:00:00.000Z
Updated: 2024-08-07T04:17:10.543Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.