curl

curl 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 内存破坏164
• 密码学缺陷88
• 其他弱点82
• 信息泄露80
• 业务逻辑61
• 身份认证51
• 注入与走私44
• 拒绝服务37
• 路径遍历21
• 代码执行19
• 访问控制17
• 服务端请求伪造8
• 开放重定向8
• 错误配置1
• 跨站脚本1

主要弱点

• 释放后使用48
• Unlabeled42
• 证书校验不当36
• 信息泄露33
• 业务逻辑错误33
• CRLF 注入26
• Information Exposure Through Sent Data22
• 输入校验不当21
• 资源消耗失控19
• Authentication Bypass by Primary Weakness19

常见资产

• https://github.com/curl/curlSOURCE_CODE · 664
• · 18

高票报告

当前状态 682 份 · 全部 682

1. 76
   CVE-2021-22901: TLS session caching disaster内存破坏 · 2021-05-26 · 高危
   $0释放后使用
2. 60
   HTTP/3 Stream Dependency Cycle Exploit其他弱点 · 2025-05-04 · 高危
   $0输入校验不当
3. 58
   Use-After-Free in SMB connection reuse (req->path dangling pointer after needle destruction)内存破坏 · 2026-04-29 · 高危
   $0释放后使用
4. 58
   CVE-2025-5399: WebSocket endless loop拒绝服务 · 2025-06-04 · 低危
   $0Loop with Unreachable Exit Condition ('Infinite Loop')
5. 55
   Memory Leak in libcurl via Location Header Handling (CWE-770)拒绝服务 · 2025-05-22 · 高危
   $0Allocation of Resources Without Limits or Throttling
6. 55
   CVE-2023-38545: socks5 heap buffer overflow内存破坏 · 2023-10-11 · 高危
   $0堆溢出
7. 55
   CVE-2020-8177: curl overwrite local file with -J其他弱点 · 2020-12-05 · 中危
   $0输入校验不当
8. 54
   [HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped Filenames路径遍历 · 2026-09-26 · 高危
   $0路径遍历
9. 54
   CVE-2025-5025: No QUIC certificate pinning with wolfSSL密码学缺陷 · 2025-05-28 · 中危
   $0证书校验不当
10. 53
    Buffer overflow in strcpy内存破坏 · 2024-11-08 · 严重
    $0Buffer Underflow
11. 53
    CVE-2024-7264: ASN.1 date parser overread内存破坏 · 2024-08-02 · 低危
    $0缓冲区越界读
12. 51
    CVE-2020-8286: Inferior OCSP verification密码学缺陷 · 2020-12-09 · 中危
    $0证书校验不当
13. 49
    CVE-2024-9681: HSTS subdomain overwrites parent cache entry业务逻辑 · 2024-11-06 · 低危
    $0业务逻辑错误
14. 48
    Hackers Attack Curl Vulnerability Accessing Sensitive Information信息泄露 · 2024-12-27 · 中危
    $0信息泄露
15. 46
    Integer Underflow in src/var.c内存破坏 · 2026-01-26 · 中危
    $0Integer Underflow
16. 45
    Negotiate connection reuse with wrong credentials when using CURLAUTH_ANY身份认证 · 2026-04-29 · 中危
    $0Authentication Bypass by Primary Weakness
17. 45
    MQTT Protocol Packet Injection via Unchecked CONNACK Remaining Length其他弱点 · 2026-02-05 · 低危
    $0Unlabeled
18. 45
    `Curl_socketpair()` fallback vulnerable to man-in-the-middle attack密码学缺陷 · 2025-05-20 · 未评级
    $0中间人攻击
19. 45
    Buffer Overflow Vulnerability in strcpy() Leading to Remote Code Execution内存破坏 · 2024-12-02 · 严重
    $0经典缓冲区溢出
20. 44
    Security check up拒绝服务 · 2025-07-24 · 低危
    $0Allocation of Resources Without Limits or Throttling
21. 43
    wcurl Argument Injection via Unquoted Variable代码执行 · 2026-01-26 · 中危
    $0命令注入（通用）
22. 43
    CVE-2025-10966: missing SFTP host verification with wolfSSH密码学缺陷 · 2025-11-06 · 低危
    $0证书校验不当
23. 43
    CVE-2025-4947: QUIC certificate check skip with wolfSSL密码学缺陷 · 2025-05-28 · 中危
    $0Improper Validation of Certificate with Host Mismatch
24. 42
    curl --skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write业务逻辑 · 2026-05-21 · 中危
    $0TOCTOU 竞态条件
25. 42
    mbedTLS private-key blob null-termination asymmetry in lib/vtls/mbedtls.c (mbed_load_privkey)内存破坏 · 2026-05-08 · 未评级
    $0Improper Null Termination