curl

curl 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 内存破坏164
• 密码学缺陷88
• 其他弱点82
• 信息泄露80
• 业务逻辑61
• 身份认证51
• 注入与走私44
• 拒绝服务37
• 路径遍历21
• 代码执行19
• 访问控制17
• 服务端请求伪造8
• 开放重定向8
• 错误配置1
• 跨站脚本1

主要弱点

• 释放后使用48
• Unlabeled42
• 证书校验不当36
• 信息泄露33
• 业务逻辑错误33
• CRLF 注入26
• Information Exposure Through Sent Data22
• 输入校验不当21
• 资源消耗失控19
• Authentication Bypass by Primary Weakness19

常见资产

• https://github.com/curl/curlSOURCE_CODE · 664
• · 18

高票报告

当前状态 682 份 · 全部 682

1. 42
   CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)注入与走私 · 2025-05-08 · 低危
   $0CRLF 注入
2. 41
   Credential leak on redirect due to improper state clearing when parsing macdef in netrc.c信息泄露 · 2025-06-23 · 低危
   $0Information Exposure Through Sent Data
3. 39
   Windows SSPI connection-pool probe can reuse a connection under the wrong user身份认证 · 2026-08-14 · 中危
   $0Authentication Bypass by Spoofing
4. 39
   HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB拒绝服务 · 2026-05-19 · 未评级
   $0Allocation of Resources Without Limits or Throttling
5. 39
   Negotiate Authentication Premature on Connection Reuse身份认证 · 2026-04-29 · 高危
   $0认证缺陷（通用）
6. 39
   Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4内存破坏 · 2024-12-09 · 高危
   $0经典缓冲区溢出
7. 38
   urlapi: off-by-one in custom scheme validation skips last character内存破坏 · 2026-03-12 · 高危
   $0Off-by-one Error
8. 38
   Buffer Overflow Vulnerability in WebSocket Handling内存破坏 · 2024-01-02 · 高危
   $0堆溢出
9. 37
   curl Missing Sec-WebSocket-Accept Verification Enables MITM WebSocket Session Hijacking密码学缺陷 · 2026-08-05 · 未评级
   $0中间人攻击
10. 37
    CVE-2026-7168: cross-proxy Digest auth state leak信息泄露 · 2026-04-29 · 中危
    $0Exposure of Data Element to Wrong Session
11. 37
    Bypassing Strict SSH Server Verification via Connection Pool Reuse in libcurl业务逻辑 · 2026-04-01 · 未评级
    $0Unlabeled
12. 37
    testing hackerone functions身份认证 · 2025-12-14 · 低危
    $0认证尝试次数未限制
13. 36
    MQTT state machine confusion: PINGRESP/DISCONNECT with non-zero remaining_length dispatches to stale nextstate其他弱点 · 2026-04-30 · 中危
    $0输入校验不当
14. 36
    Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer Overflow内存破坏 · 2026-02-27 · 中危
    $0经典缓冲区溢出
15. 36
    CVE-2025-9086: Out of bounds read for cookie path内存破坏 · 2025-09-10 · 低危
    $0缓冲区越界读
16. 36
    Sensitive information disclosure with malicious netrc file信息泄露 · 2025-06-22 · 中危
    $0LLM06: Sensitive Information Disclosure
17. 36
    CVE-2025-0167: netrc and default credential leak信息泄露 · 2025-02-07 · 低危
    $0LLM06: Sensitive Information Disclosure
18. 36
    CVE-2024-8096: OCSP stapling bypass with GnuTLS密码学缺陷 · 2024-09-11 · 中危
    $0证书校验不当
19. 35
    Windows filename sanitizer misses Unicode COM/LPT reserved device names其他弱点 · 2026-09-24 · 低危
    $0Unlabeled
20. 35
    Credentials forwarded to HTTP after HTTPS→HTTP same-port redirect — url_set_data_creds uses scheme-blind comparator开放重定向 · 2026-05-21 · 低危
    $0Unlabeled
21. 34
    CVE-2026-3805: use after free in SMB connection reuse内存破坏 · 2026-03-11 · 中危
    $0释放后使用
22. 34
    Unsanitized IPFS CID Allows SSRF Against Configured Gateway服务端请求伪造 · 2025-10-03 · 中危
    $0SSRF
23. 34
    CVE-2024-6197: freeing stack buffer in utf8asn1str内存破坏 · 2024-07-24 · 中危
    $0Free of Memory not on the Heap
24. 33
    CVE-2026-7009: OCSP stapling bypass with Apple SecTrust密码学缺陷 · 2026-04-29 · 中危
    $0证书校验不当
25. 33
    on the implications of permitting procedural culling密码学缺陷 · 2025-07-22 · 低危
    $0Use of Insufficiently Random Values