- Home
- CVEs with nessus.description==This update for curl fixes the following security issues :
- CVE-2016-8624: invalid URL parsing with '#'
(bsc#1005646)
- CVE-2016-8623: Use-after-free via shared cookies
(bsc#1005645)
- CVE-2016-8622: URL unescape heap overflow via integer
truncation (bsc#1005643)
- CVE-2016-8621: curl_getdate read out of bounds
(bsc#1005642)
- CVE-2016-8620: glob parser write/read out of bounds
(bsc#1005640)
- CVE-2016-8619: double-free in krb5 code (bsc#1005638)
- CVE-2016-8618: double-free in curl_maprintf
(bsc#1005637)
- CVE-2016-8617: OOB write via unchecked multiplication
(bsc#1005635)
- CVE-2016-8616: case insensitive password comparison
(bsc#1005634)
- CVE-2016-8615: cookie injection for other servers
(bsc#1005633)
- CVE-2016-7167: escape and unescape integer overflows
(bsc#998760)
Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top