curl

curl 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 内存破坏164
• 密码学缺陷88
• 其他弱点82
• 信息泄露80
• 业务逻辑61
• 身份认证51
• 注入与走私44
• 拒绝服务37
• 路径遍历21
• 代码执行19
• 访问控制17
• 服务端请求伪造8
• 开放重定向8
• 错误配置1
• 跨站脚本1

主要弱点

• 释放后使用48
• Unlabeled42
• 证书校验不当36
• 信息泄露33
• 业务逻辑错误33
• CRLF 注入26
• Information Exposure Through Sent Data22
• 输入校验不当21
• 资源消耗失控19
• Authentication Bypass by Primary Weakness19

常见资产

• https://github.com/curl/curlSOURCE_CODE · 664
• · 18

高票报告

当前状态 281 份 · 全部 682

1. 60
   HTTP/3 Stream Dependency Cycle Exploit其他弱点 · 2025-05-04 · 高危
   $0输入校验不当
2. 53
   Buffer overflow in strcpy内存破坏 · 2024-11-08 · 严重
   $0Buffer Underflow
3. 48
   Hackers Attack Curl Vulnerability Accessing Sensitive Information信息泄露 · 2024-12-27 · 中危
   $0信息泄露
4. 46
   Integer Underflow in src/var.c内存破坏 · 2026-01-26 · 中危
   $0Integer Underflow
5. 45
   Buffer Overflow Vulnerability in strcpy() Leading to Remote Code Execution内存破坏 · 2024-12-02 · 严重
   $0经典缓冲区溢出
6. 44
   Security check up拒绝服务 · 2025-07-24 · 低危
   $0Allocation of Resources Without Limits or Throttling
7. 43
   wcurl Argument Injection via Unquoted Variable代码执行 · 2026-01-26 · 中危
   $0命令注入（通用）
8. 42
   curl --skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write业务逻辑 · 2026-05-21 · 中危
   $0TOCTOU 竞态条件
9. 42
   CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)注入与走私 · 2025-05-08 · 低危
   $0CRLF 注入
10. 39
    Windows SSPI connection-pool probe can reuse a connection under the wrong user身份认证 · 2026-08-14 · 中危
    $0Authentication Bypass by Spoofing
11. 39
    HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB拒绝服务 · 2026-05-19 · 未评级
    $0Allocation of Resources Without Limits or Throttling
12. 39
    Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4内存破坏 · 2024-12-09 · 高危
    $0经典缓冲区溢出
13. 38
    Buffer Overflow Vulnerability in WebSocket Handling内存破坏 · 2024-01-02 · 高危
    $0堆溢出
14. 37
    curl Missing Sec-WebSocket-Accept Verification Enables MITM WebSocket Session Hijacking密码学缺陷 · 2026-08-05 · 未评级
    $0中间人攻击
15. 36
    Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer Overflow内存破坏 · 2026-02-27 · 中危
    $0经典缓冲区溢出
16. 34
    Unsanitized IPFS CID Allows SSRF Against Configured Gateway服务端请求伪造 · 2025-10-03 · 中危
    $0SSRF
17. 33
    on the implications of permitting procedural culling密码学缺陷 · 2025-07-22 · 低危
    $0Use of Insufficiently Random Values
18. 32
    Exposed .git/config File Leading to Potential Sensitive Information Disclosure信息泄露 · 2026-03-20 · 低危
    $0Unlabeled
19. 32
    Missing Security Headers其他弱点 · 2025-08-23 · 中危
    $0Unlabeled
20. 32
    WebSocket Fragmentation DoS on Curl Client拒绝服务 · 2025-08-19 · 高危
    $0资源消耗失控
21. 31
    SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backends密码学缺陷 · 2026-01-20 · 中危
    $0Missing Required Cryptographic Step
22. 31
    Arbitrary File Read via file:// Protocol in cURL路径遍历 · 2025-07-09 · 严重
    $0路径遍历
23. 30
    curl_share TOCTOU > RCE via Curl_llist _dtor Function Pointer Hijack业务逻辑 · 2026-08-26 · 严重
    $0TOCTOU 竞态条件
24. 30
    Vulnerability Report: Buffer Overflow in Path Sanitization内存破坏 · 2026-06-16 · 严重
    $0Unlabeled
25. 30
    SMB READ_ANDX DataOffset not validated其他弱点 · 2026-03-16 · 高危
    $0Unlabeled