CVE-2024-11053

LOW3.4

Description

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Affected products

curl / curl7.11.1 – 7.11.1
curl / curl8.10.1 – 8.10.1
curl / curl8.10.0 – 8.10.0
curl / curl8.9.1 – 8.9.1
curl / curl8.9.0 – 8.9.0
curl / curl8.8.0 – 8.8.0
curl / curl8.7.1 – 8.7.1
curl / curl8.7.0 – 8.7.0
curl / curl8.6.0 – 8.6.0
curl / curl8.5.0 – 8.5.0
curl / curl8.4.0 – 8.4.0
curl / curl8.3.0 – 8.3.0
curl / curl8.2.1 – 8.2.1
curl / curl8.2.0 – 8.2.0
curl / curl8.1.2 – 8.1.2
curl / curl8.1.1 – 8.1.1
curl / curl8.1.0 – 8.1.0
curl / curl8.0.1 – 8.0.1
curl / curl8.0.0 – 8.0.0
curl / curl7.88.1 – 7.88.1
curl / curl7.88.0 – 7.88.0
curl / curl7.87.0 – 7.87.0
curl / curl7.86.0 – 7.86.0
curl / curl7.85.0 – 7.85.0
curl / curl7.84.0 – 7.84.0
curl / curl7.83.1 – 7.83.1
curl / curl7.83.0 – 7.83.0
curl / curl7.82.0 – 7.82.0
curl / curl7.81.0 – 7.81.0
curl / curl7.80.0 – 7.80.0
curl / curl7.79.1 – 7.79.1
curl / curl7.79.0 – 7.79.0
curl / curl7.78.0 – 7.78.0
curl / curl7.77.0 – 7.77.0
curl / curl7.76.1 – 7.76.1
curl / curl7.76.0 – 7.76.0
curl / curl7.75.0 – 7.75.0
curl / curl7.74.0 – 7.74.0
curl / curl7.73.0 – 7.73.0
curl / curl7.72.0 – 7.72.0
curl / curl7.71.1 – 7.71.1
curl / curl7.71.0 – 7.71.0
curl / curl7.70.0 – 7.70.0
curl / curl7.69.1 – 7.69.1
curl / curl7.69.0 – 7.69.0
curl / curl7.68.0 – 7.68.0
curl / curl7.67.0 – 7.67.0
curl / curl7.66.0 – 7.66.0
curl / curl7.65.3 – 7.65.3
curl / curl7.65.2 – 7.65.2
curl / curl7.65.1 – 7.65.1
curl / curl7.65.0 – 7.65.0
curl / curl7.64.1 – 7.64.1
curl / curl7.64.0 – 7.64.0
curl / curl7.63.0 – 7.63.0
curl / curl7.62.0 – 7.62.0
curl / curl7.61.1 – 7.61.1
curl / curl7.61.0 – 7.61.0
curl / curl7.60.0 – 7.60.0
curl / curl7.59.0 – 7.59.0
curl / curl7.58.0 – 7.58.0
curl / curl7.57.0 – 7.57.0
curl / curl7.56.1 – 7.56.1
curl / curl7.56.0 – 7.56.0
curl / curl7.55.1 – 7.55.1
curl / curl7.55.0 – 7.55.0
curl / curl7.54.1 – 7.54.1
curl / curl7.54.0 – 7.54.0
curl / curl7.53.1 – 7.53.1
curl / curl7.53.0 – 7.53.0
curl / curl7.52.1 – 7.52.1
curl / curl7.52.0 – 7.52.0
curl / curl7.51.0 – 7.51.0
curl / curl7.50.3 – 7.50.3
curl / curl7.50.2 – 7.50.2
curl / curl7.50.1 – 7.50.1
curl / curl7.50.0 – 7.50.0
curl / curl7.49.1 – 7.49.1
curl / curl7.49.0 – 7.49.0
curl / curl7.48.0 – 7.48.0
curl / curl7.47.1 – 7.47.1
curl / curl7.47.0 – 7.47.0
curl / curl7.46.0 – 7.46.0
curl / curl7.45.0 – 7.45.0
curl / curl7.44.0 – 7.44.0
curl / curl7.43.0 – 7.43.0
curl / curl7.42.1 – 7.42.1
curl / curl7.42.0 – 7.42.0
curl / curl7.41.0 – 7.41.0
curl / curl7.40.0 – 7.40.0
curl / curl7.39.0 – 7.39.0
curl / curl7.38.0 – 7.38.0
curl / curl7.37.1 – 7.37.1
curl / curl7.37.0 – 7.37.0
curl / curl7.36.0 – 7.36.0
curl / curl7.35.0 – 7.35.0
curl / curl7.34.0 – 7.34.0
curl / curl7.33.0 – 7.33.0
curl / curl7.32.0 – 7.32.0
curl / curl7.31.0 – 7.31.0
curl / curl7.30.0 – 7.30.0
curl / curl7.29.0 – 7.29.0
curl / curl7.28.1 – 7.28.1
curl / curl7.28.0 – 7.28.0
curl / curl7.27.0 – 7.27.0
curl / curl7.26.0 – 7.26.0
curl / curl7.25.0 – 7.25.0
curl / curl7.24.0 – 7.24.0
curl / curl7.23.1 – 7.23.1
curl / curl7.23.0 – 7.23.0
curl / curl7.22.0 – 7.22.0
curl / curl7.21.7 – 7.21.7
curl / curl7.21.6 – 7.21.6
curl / curl7.21.5 – 7.21.5
curl / curl7.21.4 – 7.21.4
curl / curl7.21.3 – 7.21.3
curl / curl7.21.2 – 7.21.2
curl / curl7.21.1 – 7.21.1
curl / curl7.21.0 – 7.21.0
curl / curl7.20.1 – 7.20.1
curl / curl7.20.0 – 7.20.0
curl / curl7.19.7 – 7.19.7
curl / curl7.19.6 – 7.19.6
curl / curl7.19.5 – 7.19.5
curl / curl7.19.4 – 7.19.4
curl / curl7.19.3 – 7.19.3
curl / curl7.19.2 – 7.19.2
curl / curl7.19.1 – 7.19.1
curl / curl7.19.0 – 7.19.0
curl / curl7.18.2 – 7.18.2
curl / curl7.18.1 – 7.18.1
curl / curl7.18.0 – 7.18.0
curl / curl7.17.1 – 7.17.1
curl / curl7.17.0 – 7.17.0
curl / curl7.16.4 – 7.16.4
curl / curl7.16.3 – 7.16.3
curl / curl7.16.2 – 7.16.2
curl / curl7.16.1 – 7.16.1
curl / curl7.16.0 – 7.16.0
curl / curl7.15.5 – 7.15.5
curl / curl7.15.4 – 7.15.4
curl / curl7.15.3 – 7.15.3
curl / curl7.15.2 – 7.15.2
curl / curl7.15.1 – 7.15.1
curl / curl7.15.0 – 7.15.0
curl / curl7.14.1 – 7.14.1
curl / curl7.14.0 – 7.14.0
curl / curl7.13.2 – 7.13.2
curl / curl7.13.1 – 7.13.1
curl / curl7.13.0 – 7.13.0
curl / curl7.12.3 – 7.12.3
curl / curl7.12.2 – 7.12.2
curl / curl7.12.1 – 7.12.1
curl / curl7.12.0 – 7.12.0
curl / curl7.11.2 – 7.11.2
curl / curl8.11.0 – 8.11.0
curl / curl7.11.0 – 7.11.0
curl / curl7.10.8 – 7.10.8
curl / curl7.10.7 – 7.10.7
curl / curl7.10.6 – 7.10.6
curl / curl7.10.5 – 7.10.5
curl / curl7.10.4 – 7.10.4
curl / curl7.10.3 – 7.10.3
curl / curl7.10.2 – 7.10.2
curl / curl7.10.1 – 7.10.1
curl / curl7.10 – 7.10
curl / curl7.9.8 – 7.9.8
curl / curl7.9.7 – 7.9.7
curl / curl7.9.6 – 7.9.6
curl / curl7.9.5 – 7.9.5
curl / curl7.9.4 – 7.9.4
curl / curl7.9.3 – 7.9.3
curl / curl7.9.2 – 7.9.2
curl / curl7.9.1 – 7.9.1
curl / curl7.9 – 7.9
curl / curl7.8.1 – 7.8.1
curl / curl7.8 – 7.8
curl / curl7.7.3 – 7.7.3
curl / curl7.7.2 – 7.7.2
curl / curl7.7.1 – 7.7.1
curl / curl7.7 – 7.7
curl / curl7.6.1 – 7.6.1
curl / curl7.6 – 7.6
curl / curl7.5.2 – 7.5.2
curl / curl7.5.1 – 7.5.1
curl / curl7.5 – 7.5
curl / curl7.4.2 – 7.4.2
curl / curl7.4.1 – 7.4.1
curl / curl7.4 – 7.4
curl / curl7.3 – 7.3
curl / curl7.2.1 – 7.2.1
curl / curl7.2 – 7.2
curl / curl7.1.1 – 7.1.1
curl / curl7.1 – 7.1
curl / curl6.5.2 – 6.5.2
curl / curl6.5.1 – 6.5.1
curl / curl6.5 – 6.5
haxx / curl7.76.0 – 8.11.1
NetApp / bootstrap_os
NetApp / h300s_firmware
NetApp / h410s_firmware
NetApp / h500s_firmware
NetApp / h610c_firmware
NetApp / h610s_firmware
NetApp / h615c_firmware
NetApp / h700s_firmware
NetApp / ontap9 – 9
NetApp / ONTAP Select Deploy administration utility

References

Updated 44m ago · 8 sources