Haxx vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-28319 A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash.High 7.5 · May 26, 2023
• CVE-2022-27780 The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrongHigh 7.5 · Jun 2, 2022
• CVE-2016-4606 Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, causCritical 9.8 · Feb 20, 2020
• CVE-2003-1605 curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.High 7.5 · Aug 23, 2018
• CVE-2018-0500 Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who canCritical 9.8 · Jul 11, 2018
• CVE-2018-1000300 curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can resultCritical 9.8 · May 24, 2018
• CVE-2016-9953 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remoteCritical 9.8 · Mar 12, 2018
• CVE-2016-9952 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easiHigh 8.1 · Mar 12, 2018
• CVE-2018-1000007 libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties.Critical 9.8 · Jan 24, 2018
• CVE-2018-1000005 libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers.Critical 9.1 · Jan 24, 2018
• CVE-2017-8818 curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unCritical 9.8 · Nov 29, 2017
• CVE-2017-8817 The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or pCritical 9.8 · Nov 29, 2017
• CVE-2017-8816 The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultCritical 9.8 · Nov 29, 2017
• CVE-2017-1000257 An IMAP FETCH response line indicates the size of the returned data, in number of bytes.Critical 9.1 · Oct 31, 2017
• CVE-2017-1000254 libcurl may read outside of a heap allocated buffer when doing FTP.High 7.5 · Oct 6, 2017
• CVE-2016-5419 curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended rHigh 7.5 · Aug 10, 2016
• CVE-2016-4802 Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local users to execute arbitrHigh 7.8 · Jun 24, 2016
• CVE-2016-0755 The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attaHigh 7.3 · Jan 29, 2016
• CVE-2013-0249 Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SHigh 7.5 · Mar 8, 2013
• CVE-2005-0490 Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via High 8.8 · May 2, 2005