Search CVE reports
931 – 940 of 37173 results
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at...
2 affected packages
python-urllib3, python-pip
| Package | 20.04 LTS |
|---|---|
| python-urllib3 | Fixed |
| python-pip | Fixed |
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling...
1 affected package
curl
| Package | 20.04 LTS |
|---|---|
| curl | Needs evaluation |
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
1 affected package
libtasn1-6
| Package | 20.04 LTS |
|---|---|
| libtasn1-6 | Fixed |
OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an...
2 affected packages
openldap, lmdb
| Package | 20.04 LTS |
|---|---|
| openldap | Not affected |
| lmdb | Vulnerable |
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib...
4 affected packages
zlib, rsync, zsync, klibc
| Package | 20.04 LTS |
|---|---|
| zlib | Not affected |
| rsync | Not affected |
| zsync | Needs evaluation |
| klibc | Not affected |
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests...
1 affected package
undertow
| Package | 20.04 LTS |
|---|---|
| undertow | Needs evaluation |
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.
1 affected package
curl
| Package | 20.04 LTS |
|---|---|
| curl | Vulnerable |
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in...
1 affected package
curl
| Package | 20.04 LTS |
|---|---|
| curl | Vulnerable |
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option...
1 affected package
curl
| Package | 20.04 LTS |
|---|---|
| curl | Not affected |
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the...
1 affected package
curl
| Package | 20.04 LTS |
|---|---|
| curl | Vulnerable |