FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

curl -- Multiple vulnerabilities

Affected packages
curl < 7.83.1

Details

VuXML ID 11e36890-d28c-11ec-a06f-d4c9ef517024
Discovery 2022-05-11
Entry 2022-05-13

The curl project reports:

CVE-2022-27778: curl removes wrong file on error

CVE-2022-27779: cookie for trailing dot TLD

CVE-2022-27780: percent-encoded path separator in URL host

CVE-2022-27781: CERTINFO never-ending busy-loop

CVE-2022-27782: TLS and SSH connection too eager reuse

CVE-2022-30115: HSTS bypass via trailing dot

References

CVE Name CVE-2022-27778
CVE Name CVE-2022-27779
CVE Name CVE-2022-27780
CVE Name CVE-2022-27781
CVE Name CVE-2022-27782
CVE Name CVE-2022-30115
URL https://curl.se/docs/security.html