CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:haxx:curl:8.11.0:*:*:*:*:*:*:*
Informations
Vendor
haxxProduct
curlVersion
8.11.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks. | 6.5 |
Medium |
||
| When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow. | 7.3 |
High |
