curl / Docs / Vulnerability table / 8.1.1 vulnerabilities

Vulnerabilities in curl 8.1.1

Related:
Audits
Bug Bounty
Changelog
curl CVEs
Vulnerability Disclosure
Vulnerabilities Table

curl version 8.1.1 was released on May 23 2023

It has the following 14 published security problems.

Flaw	From version	To and including
Out of bounds read for cookie path	7.31.0	8.15.0
gzip integer overflow	7.10.5	8.11.1
netrc and default credential leak	7.76.0	8.11.1
netrc and redirect credential leak	7.76.0	8.11.0
HSTS subdomain overwrites parent cache entry	7.74.0	8.10.1
OCSP stapling bypass with GnuTLS	7.41.0	8.9.1
ASN.1 date parser overread	7.32.0	8.9.0
HTTP/2 push headers memory-leak	7.44.0	8.6.0
Usage of disabled protocol	7.85.0	8.6.0
HSTS long filename clears contents	7.84.0	8.4.0
cookie mixed case PSL bypass	7.46.0	8.4.0
cookie injection with none file	7.9.1	8.3.0
SOCKS5 heap buffer overflow	7.69.0	8.3.0
HTTP headers eat all memory	7.84.0	8.2.1

Further details

CVE data for 8.1.1 provided as JSON.

Changelog for curl 8.1.1

See vulnerability summary for the previous release: 8.1.0 or the subsequent release: 8.1.2