| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-1000254 | 5.0 |
libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with
|
29-06-2021 - 15:15 | 06-10-2017 - 13:29 | |
| CVE-2017-1000101 | 4.3 |
curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl rea
|
13-11-2018 - 11:29 | 05-10-2017 - 01:29 | |
| CVE-2017-1000100 | 4.3 |
When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untr
|
13-11-2018 - 11:29 | 05-10-2017 - 01:29 |