リモートホストは、GLSA-201701-47（cURL：複数の脆弱性）で説明されている脆弱性による影響を受けます。複数の脆弱性がcURLで発見されています。詳細については、記載されているCVE識別番号とバグレポートを参照してください。影響：リモートの攻撃者が中間者攻撃を行って、機密情報を取得したり、サービス拒否状態を起こしたり、任意のコードを実行したりする可能性があります。回避策：現時点では、既知の回避策はありません。

远程 Redhat Enterprise Linux 6 / 7 主机上安装的多个程序包受到 RHSA-2018:3558 公告中提及的多个漏洞影响。

  - curl：TLS 会话恢复客户端证书绕过 (CVE-2016-5419)

  - curl：以错误客户端证书重复使用连接 (CVE-2016-5420)

  - curl：释放后使用连接结构 (CVE-2016-5421)

  - curl：不正确地重复使用客户端证书 (CVE-2016-7141)

  - curl：转义和非转义整数溢出 (CVE-2016-7167)

  - curl：其他服务器的 Cookie 注入 (CVE-2016-8615)

  - curl：不区分大小写的密码比较 (CVE-2016-8616)

  - curl：通过未经检查的乘法发生越界写入 (CVE-2016-8617)

  - curl：curl_maprintf 中发生双重释放 (CVE-2016-8618)

  - curl：krb5 代码中发生双重释放 (CVE-2016-8619)

  - curl：Glob 解析器写入/读取越界 (CVE-2016-8620)

  - curl：curl_getdate 越界读取 (CVE-2016-8621)

  - curl：通过整数截断的 URL 反转义堆溢出 (CVE-2016-8622)

  - curl：通过共享 cookie 进行释放后使用 (CVE-2016-8623)

  - curl：具有 # 的 URL 解析无效 (CVE-2016-8624)

  - curl：IDNA 2003 让 curl 使用错误的主机 (CVE-2016-8625)

  - curl：printf 浮点缓冲区溢出 (CVE-2016-9586)

  - curl：--write-out 越界读取 (CVE-2017-7407)

  - curl：通过整数溢出导致 NTLM 缓冲区溢出 (CVE-2017-8816)

  - curl：FTP 通配符越界读取 (CVE-2017-8817)

  - httpd：在 mod_authnz_ldap 中使用太小的 Accept-Language 值时，发现越界写入 (CVE-2017-15710)

  - httpd：在文件名中使用结尾换行符绕过 (<FilesMatch>) (CVE-2017-15715)

  - curl：TFTP 发送超过缓冲区大小的内容 (CVE-2017-1000100)

  - curl：URL glob 程序越界读取 (CVE-2017-1000101)

  - curl：FTP PWD 响应解析器越界读取 (CVE-2017-1000254)

  - curl：IMAP FETCH 响应越界读取 (CVE-2017-1000257)

  - httpd：在 mod_session 中不当处理标头可让远程用户修改 CGI 应用程序的会话数据 (CVE-2018-1283)

  - httpd：读取 HTTP 请求失败后发生越界访问 (CVE-2018-1301)

  - httpd：mod_cache_socache 中的越界读取可让远程攻击者造成 DoS (CVE-2018-1303)

  - httpd：在 mod_auth_digest 中产生弱式摘要验证 nonce (CVE-2018-1312)

  - httpd: mod_http2：配置给工作者过多时间，可能导致 DoS (CVE-2018-1333)

  - httpd：通过持续的 SETTINGS 造成 HTTP/2 连接 DoS (CVE-2018-11763) 

  - curl：通过整数溢出的 NTLM 密码溢出 (CVE-2018-14618)

  - curl：重定向中的 HTTP 身份验证泄露 (CVE-2018-1000007)

  - curl：伪造 FTP 路径导致 NIL 字节越界写入 (CVE-2018-1000120)

  - curl：LDAP 空指针取消引用 (CVE-2018-1000121)

  - curl：RTSP RTP 缓冲区过度读取 (CVE-2018-1000122)

  - curl：当缺失 RTSP 标头时，发生越界堆读取，导致信息泄露或拒绝服务 (CVE-2018-1000301)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 Oracle Secure Global Desktop 版本为 4.71、5.2 或 5.3，且缺少 2017 年 4 月关键修补程序更新 (CPU) 中的一个安全修补程序。因而会受到多个漏洞的影响：- X.Org libExt 内 Window System (X11) 子组件系统的多个函数中存在一个整数溢出情况，这是因为计算处理返回数据所需的内存量时，不当验证用户提供的输入所导致。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。请注意，此问题只影响 4.71 版本。(CVE-2013-1982) - 处理大光标尺寸或名称长度时，由于未正确验证用户提供的输入，X.Org libXfixes 的 XFixesGetCursorImage() 函数中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1983) - X.Org libXi 的多个函数中存在一个整数溢出情况，这是因为计算处理返回数据所需的内存量时，不当验证用户提供的输入所导致。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1984) - XineramaQueryScreens() 函数的 X.Org libXinerama 中存在一个整数溢出情况，这是因为计算处理返回数据所需的内存量时，不当验证用户提供的输入所导致。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1985) - X.Org libXrandr 的多个函数中存在一个整数溢出情况，这是因为计算处理返回数据所需的内存量时，不当验证用户提供的输入所导致。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1986) - X.Org libXrender 的多个子组件中存在一个整数溢出情况，这是因为计算处理返回数据所需的内存量时，不当验证用户提供的输入所导致。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1987) - 将较小的整数类型转换成较大的整数类型时，由于未正确检查处理返回数据所需的内存量，X.Org libXi 的 XListInputDevices() 函数（与非预期签名扩展有关）中存在溢出情况。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2013-1995) - 由于不当验证用户提供的输入，X.Org LibXi 的多个函数中存在溢出情况。未经身份验证的远程攻击者可利用此情况，通过特制的长度或索引，造成拒绝服务情况，或是执行任意代码。(CVE-2013-1998) - 由于未正确验证用户提供的输入，_XtResourceConfigurationEH() 函数的 X.Org LibXt 中存在溢出情况。未经身份验证的远程攻击者可利用此情况，通过特制的长度或索引，造成拒绝服务情况，或是执行任意代码。(CVE-2013-2002) - 由于未正确验证用户提供的输入，_XcursorFileHeaderCreate() 函数的 X.Org libXcursor 中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题，通过特制的文件，造成拒绝服务情况或执行任意代码。(CVE-2013-2003) - 由于未检查指针初始化正确与否，X.Org LibXt 的多个函数中存在未初始化指针缺陷。未经身份验证的远程攻击者可利用此问题损坏内存，从而导致拒绝服务或可能地执行任意代码。(CVE-2013-2005) - 将密码与不存在的用户名配对时，由于未处理密码，Application Server 子组件 (Apache Tomcat) 中存在缺陷。经身份验证的远程攻击者可利用此问题，通过时序攻击来枚举用户账户名。(CVE-2016-0762) - 由于未正确使用指针算术进行堆缓冲区边界检查，s3_srvr.c, ssl_sess.c 和 t1_lib.c 中存在多个整数溢出情况。未经身份验证的远程攻击者可利用这些问题造成拒绝服务。(CVE-2016-2177) - 由于未妥当确定是否使用常数时间操作，dsa_ossl.c 的 dsa_sign_setup() 函数中存在信息泄露漏洞。未经身份验证的远程攻击者可利用此问题，通过时序边信道攻击，泄露 DSA 密钥信息。(CVE-2016-2178) - 由于未正确限制与未使用乱序消息相关的队列条目使用期，DTLS 实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过同时维持多个构建的 DTLS 会话，来消耗内存。(CVE-2016-2179) - X.509 公钥基础设施时间戳协议 (TSP) 实现中存在越界读取错误。未经身份验证的远程攻击者可利用此问题，通过由 'openssl ts' 命令错误处理的特制时间戳文件，造成拒绝服务或泄露敏感信息。(CVE-2016-2180) - 由于未正确处理记录中的 epoch 序列号，DTLS 实现的防重放功能中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过伪造的 DTLS 记录，造成合法数据包遭到终止。(CVE-2016-2181) - 处理 BIGNUM 值时，由于未正确验证用户提供的输入，bn_print.c 内的 BN_bn2dec() 函数中存在溢出情况。未经身份验证的远程攻击者可利用此问题使进程崩溃。(CVE-2016-2182) - 由于默认使用弱 64 位块密码，3DES 和 Blowfish 算法中存在漏洞（称为 SWEET32）。具有足够资源的中间人攻击者可利用此漏洞，通过 'birthday' 攻击检测会在固定密码与已知纯文本之间泄露 XOR 的冲突，进而泄露密码文本（例如安全 HTTPS Cookie），并可能导致劫持经身份验证的会话。(CVE-2016-2183) - 由于未正确验证 TLS 证书，Core 子组件（尤其是在 libcurl 库中）中存在缺陷。经身份验证且可拦载网络流量的远程攻击者可利用此问题，使用看似有效的证书伪造 TLS/SSL 服务器，以泄露或操控已传输的数据。请注意，此问题只影响 5.2 和 5.3 版本。(CVE-2016-3739) - 当加载动态链接库 (DLL) 文件 security.dll、secur32.dll 或 ws2_32.dll 时，由于搜索可能不受信任或用户无法控制的不安全路径，cURL 和 libcurl 中存在缺陷。本地攻击者可利用此问题，通过置于搜索路径的 Trojan DLL 文件，以运行程序的用户的权限执行任意代码。(CVE-2016-4802) - 由于与 Web 应用程序相关的不明缺陷，Apache Tomcat 中存在安全绕过漏洞。本地攻击者可利用此问题，通过适用于 Web 应用程序的实用工具方式，绕过已配置的 SecurityManager。(CVE-2016-5018) - 当处理服务器响应时，文件 Xv.c 的 Window System (X11) 子组件中（尤其是在 XvQueryAdaptors() 函数内）存在越界访问错误。经过认证的远程攻击者可利用此问题影响机密性、完整性和可用性。(CVE-2016-5407) - 由于即使客户端证书失败，程序仍然尝试恢复 TLS 会话，文件 lib/vtls/vtls.c 的 cURL 和 libcurl 中存在释放后使用错误。未经身份验证的远程攻击者可利用此问题绕过验证机制，允许攻击者控制使用的连接。(CVE-2016-5419) - 由于程序重复使用具有不同客户端证书的 TLS 连接，cURL 和 libcurl 内的文件 lib/vtls/vtls.c 的 Curl_ssl_config_matches() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，泄露敏感的跨域信息。(CVE-2016-5420) - 由于未正确清除连接指针，cURL 和 libcurl 内的文件 lib/multi.c 的 close_all_connections() 函数中存在释放后使用错误。未经身份验证的远程攻击者可利用此问题对机密性、完整性和/或可用性产生不明影响。(CVE-2016-5421) - 由于未正确处理票证 HMAC 摘要，t1_lib.c 内的 tls_decrypt_ticket() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过过短的票证造成进程崩溃，进而导致拒绝服务。(CVE-2016-6302) - 由于未正确验证用户提供的输入，mdc2dgst.c 的 MDC2_Update() 函数中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题造成基于堆的缓冲区溢出，从而导致拒绝服务情况或可能执行任意代码。(CVE-2016-6303) - 由于未正确处理客户端的过大 OCSP 状态请求扩展，t1_lib.c 内的 ssl_parse_clienthello_tlsext() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过大型 OCSP 状态请求扩展，消耗内存资源，进而导致拒绝服务情况。(CVE-2016-6304) - 由于未正确处理空记录，rec_layer_s3.c 内的 SSL_peek() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过触发 SSL_peek 调用中的零长度记录，造成无限循环，进而导致拒绝服务情况。(CVE-2016-6305) - 证书解析器中存在越界读取错误，允许未经身份验证的远程攻击者，通过构建的证书操作，造成拒绝服务。(CVE-2016-6306) - 由于分配内存之前，未能检查超标长度，状态机实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过构建的 TLS 消息，消耗内存资源。(CVE-2016-6307) - 由于未正确处理过长 DTLS 消息，DTLS 实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过构建的 DTLS 消息，消耗可用内存资源。(CVE-2016-6308) - 由于不当限制配置文件系统属性替换功能访问系统属性，SecurityManager 的 Apache Tomcat 中存在缺陷。本地攻击者可利用此问题，通过特制的 Web应用程序，绕过 SecurityManager 限制并泄露系统属性。(CVE-2016-6794) - Apache Tomcat 中存在缺陷，允许本地攻击者通过更改 JSP Servlet 的配置参数，绕过配置的 SecurityManager。(CVE-2016-6796) - 由于未能限制全球 JNDI 资源的 Web应用程序访问，Apache Tomcat 中存在缺陷。本地攻击者可利用此问题获得未经授权的资源访问。(CVE-2016-6797) - Apache Tomcat 中存在一个缺陷，在处理包含某个无效字符的请求行时会遭到触发。未经身份验证的远程攻击者可利用此问题，通过将额外的标头注入响应，以发动 HTTP 响应拆分攻击。(CVE-2016-6816) - 处理过大标头时，HTTP/2 解析器的 Apache Tomcat 中存在无限循环情况。未经身份验证的远程攻击者可利用此问题，通过特制的请求造成拒绝服务情况。(CVE-2016-6817) - 处理可被整除、大于 256 位的输入长度时，Broadwell-specific Montgomery 乘法运算中存在进位传送错误。这会导致暂时性身份验证和密钥协商失败，或使用特制输入的公钥操作的可复现错误结果。中间人攻击者可能会利用此问题，危害利用 Brainpool P-512 曲线的 ECDH 密钥协商。(CVE-2016-7055) - 处理 cookie 时，cURL 内的文件 lib/cookie.c 的 Curl_cookie_init() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题在任意域注入新 cookie。(CVE-2016-8615) - 当检查针对已重用连接提供的证书时，由于不区分大小写比较，cURL 内的文件 lib/url.c 的 ConnectionExists() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，在不知道正确的用户名和密码大小写的情况下进行验证。(CVE-2016-8616) - 由于未正确验证特定输入，cURL 组件内的文件 lib/base64.c 的 base64_encode() 函数中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2016-8617) - 由于把过长输入提供给 curl_maprintf() API 方法时，未进行正确验证，cURL 内的文件 lib/mprintf.c 的 alloc_addbyter() 函数中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，释放已经释放的内存，进而造成程序崩溃。(CVE-2016-8618) - 处理 Kerberos 验证时，cURL 内的 lib/security.c 文件的 read_data() 函数中存在双重释放错误。未经身份验证的远程攻击者可利用此错误，释放已释放的内存，最终对机密性、完整性和可用性造成不明影响。(CVE-2016-8619) - 在 cURL 中，文件 tool_urlglob.c 的通配符功能里有存在越界访问错误。未经身份验证的远程攻击者可利用此问题泄露内存内容或执行任意代码。(CVE-2016-8620) - 处理日期时，cURL 内的 lib/parsedate.c 文件的 parsedate() 函数中存在越界错误。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或泄露内存内容。(CVE-2016-8621) - 处理过大 URL 时，cURL 内的 lib/escape.c 文件的 curl_easy_unescape() 函数中存在整数截断错误。未经身份验证的远程攻击者可利用此问题造成拒绝服务情况或执行任意代码。(CVE-2016-8622) - 处理共享 cookie 时，cURL 内的 lib/cookie.c 文件中存在释放后使用错误。未经身份验证的远程攻击者可利用此问题泄露内存内容。(CVE-2016-8623) - 解析 URL（其主机名部份以 '#' 字符结尾）的颁发机构组件时，cURL 内文件 lib/url.c 的 parseurlandfillconn() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，建立到另一个主机（而非原本目标）的连接。(CVE-2016-8624) - 将域名转换成用于 DNS 解析的域名代码时，由于使用的是过时的 IDNA 2003 标准而非 IDNA 2008 标准，国际域名 (IDNA) 处理的 cURL 中存在缺陷。未经身份验证的远程攻击者可利用此问题，造成网络流量被重定向到另一个主机（而非原本目标）。(CVE-2016-8625) - catalina/mbeans/JmxRemoteLifecycleListener.java 类的 Apache Tomcat 内存在缺陷，会在对 Java 对象进行反序列化时触发。未经身份验证的远程攻击者可利用此问题执行任意代码。(CVE-2016-8735) - 处理 User-Agent 标头中的空白模式时，Web Server 组件 (Apache HTTP Server) 中存在缺陷。经身份验证的远程攻击者可利用此问题，通过特制的用户代理标头造成程序错误处理请求序列，从而导致解释响应出错、污染缓存，或将某个请求的内容泄露给第二个下游用户代理。(CVE-2016-8743) - 处理参数以进行 DHE 或 ECDHE 密钥交换时，文件 ssl/statem/statem_clnt.c 中存在空指针取消引用缺陷。未经身份验证的远程攻击者可利用此问题，通过特制的参数造成拒绝服务情况。(CVE-2017-3730) - 尤其在 OpenSSL 组件中，利用 CHACHA20/POLY1305 或 RC4-MD5 密码处理数据包时，Core 子组件中存在越界读取错误。未经身份验证的远程攻击者可利用此问题，通过特制的截断数据包，造成拒绝服务情况。(CVE-2017-3731) - x86_64 Montgomery 平方运算实现中存在携带传播缺陷，可造成 BN_mod_exp() 函数生成错误的结果。未经身份验证却具有充足资源的远程攻击者可利用此问题，获取有关私钥的敏感信息。请注意，此问题非常类似于 CVE-2015-3193。另外，在具有持久性 DH 参数且多个客户端共享私钥的情况下，攻击者还需要额外使用目标私钥，在线访问未经修复的系统。例如，在基于 OpenSSL DHE 的 SSL/TLS 密码套件中，默认会发生上述情况。(CVE-2017-3732) 请注意，Nessus 并未针对这些问题进行测试，而仅依赖应用程序自我报告的版本号。

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3558 advisory.

  - curl: TLS session resumption client cert bypass (CVE-2016-5419)

  - curl: Re-using connection with wrong client cert (CVE-2016-5420)

  - curl: Use of connection struct after free (CVE-2016-5421)

  - curl: Incorrect reuse of client certificates (CVE-2016-7141)

  - curl: escape and unescape integer overflows (CVE-2016-7167)

  - curl: Cookie injection for other servers (CVE-2016-8615)

  - curl: Case insensitive password comparison (CVE-2016-8616)

  - curl: Out-of-bounds write via unchecked multiplication (CVE-2016-8617)

  - curl: Double-free in curl_maprintf (CVE-2016-8618)

  - curl: Double-free in krb5 code (CVE-2016-8619)

  - curl: Glob parser write/read out of bounds (CVE-2016-8620)

  - curl: curl_getdate out-of-bounds read (CVE-2016-8621)

  - curl: URL unescape heap overflow via integer truncation (CVE-2016-8622)

  - curl: Use-after-free via shared cookies (CVE-2016-8623)

  - curl: Invalid URL parsing with '#' (CVE-2016-8624)

  - curl: IDNA 2003 makes curl use wrong host (CVE-2016-8625)

  - curl: printf floating point buffer overflow (CVE-2016-9586)

  - curl: --write-out out of bounds read (CVE-2017-7407)

  - curl: NTLM buffer overflow via integer overflow (CVE-2017-8816)

  - curl: FTP wildcard out of bounds read (CVE-2017-8817)

  - httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values (CVE-2017-15710)

  - httpd: <FilesMatch> bypass with a trailing newline in the file name (CVE-2017-15715)

  - curl: TFTP sends more than buffer size (CVE-2017-1000100)

  - curl: URL globbing out of bounds read (CVE-2017-1000101)

  - curl: FTP PWD response parser out of bounds read (CVE-2017-1000254)

  - curl: IMAP FETCH response out of bounds read (CVE-2017-1000257)

  - httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI     applications (CVE-2018-1283)

  - httpd: Out of bounds access after failure in reading the HTTP request (CVE-2018-1301)

  - httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS (CVE-2018-1303)

  - httpd: Weak Digest auth nonce generation in mod_auth_digest (CVE-2018-1312)

  - httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS (CVE-2018-1333)

  - httpd: DoS for HTTP/2 connections by continuous SETTINGS frames (CVE-2018-11763)

  - curl: NTLM password overflow via integer overflow (CVE-2018-14618)

  - curl: HTTP authentication leak in redirects (CVE-2018-1000007)

  - curl: FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)

  - curl: LDAP NULL pointer dereference (CVE-2018-1000121)

  - curl: RTSP RTP buffer over-read (CVE-2018-1000122)

  - curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service     (CVE-2018-1000301)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The cURL project reports

- cookie injection for other servers

- case insensitive password comparison

- OOB write via unchecked multiplication

- double-free in curl_maprintf

- double-free in krb5 code

- glob parser write/read out of bounds

- curl_getdate read out of bounds

- URL unescape heap overflow via integer truncation

- Use-after-free via shared cookies

- invalid URL parsing with '#'

- IDNA 2003 makes curl use wrong host

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple integer overflows in the (1) curl_escape, (2)     curl_easy_escape, (3) curl_unescape, and (4)     curl_easy_unescape functions in libcurl before 7.50.3     allow attackers to have unspecified impact via a string     of length 0xffffffff, which triggers a heap-based     buffer overflow.(CVE-2016-7167)

  - ** RESERVED ** This candidate has been reserved by an     organization or individual that will use it when     announcing a new security problem. When the candidate     has been publicized, the details for this candidate     will be     provided.(CVE-2016-8615,CVE-2016-8616,CVE-2016-8617,CVE
    -2016-8618,CVE-2016-8619,CVE-2016-8621,CVE-2016-8622,CV     E-2016-8623,CVE-2016-8624)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Oracle Secure Global Desktop installed on the remote host is 4.71, 5.2, or 5.3 and is missing a security patch from the April 2017 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities :

  - An integer overflow condition exists in the Window System     (X11) subcomponent in multiple functions in X.Org libExt     due to improper validation of user-supplied input when     calculating the amount of memory required to handle     return data. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. Note that this issue     only affects version 4.71. (CVE-2013-1982)

  - An integer overflow condition exists in X.Org libXfixes     in the XFixesGetCursorImage() function when handling     large cursor dimensions or name lengths due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1983)

  - An integer overflow condition exists within multiple     functions in X.Org libXi due to improper validation of     user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1984)

  - An integer overflow condition exists in X.Org     libXinerama in the XineramaQueryScreens() function due     to improper validation of user-supplied input when     calculating the amount of memory needed to handle return     data. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2013-1985)

  - An integer overflow condition exists in multiple     functions in X.Org libXrandr due to improper validation     of user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1986)

  - An integer overflow condition exists in multiple     functions in X.Org libXrender due to improper validation     of user-supplied input when calculating the amount of     memory needed to handle return data. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2013-1987)

  - An overflow condition exists in X.Org libXi in the     XListInputDevices() function, related to an unexpected     sign extension, due to improper checking of the amount     of memory needed to handle returned data when converting     smaller integer types to larger ones. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2013-1995)

  - An overflow condition exists within multiple functions     in X.Org LibXi due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted length or     index, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2013-1998)

  - An overflow condition exists in X.Org LibXt in the
    _XtResourceConfigurationEH() function due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this, via a specially     crafted length or index, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2013-2002)

  - An integer overflow condition exists in X.Org libXcursor     in the  _XcursorFileHeaderCreate() function due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, via     a specially crafted file, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2013-2003)

  - An uninitialized pointer flaw exists within multiple     functions in X.Org LibXt due to a failure to check for     proper initialization of pointers. An unauthenticated,     remote attacker can exploit this to corrupt memory,     resulting in a denial of service condition or the     possible execution of arbitrary code. (CVE-2013-2005)

  - A flaw exists in the Application Server subcomponent     (Apache Tomcat) due to a failure to process passwords     when they are paired with non-existent usernames. An     authenticated, remote attacker can exploit this, via a     timing attack, to enumerate user account names.
    (CVE-2016-0762)

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit these to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause a     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - A flaw exists in the Core subcomponent, specifically in     the libcurl library, due to improper validation of TLS     certificates. An authenticated, remote attacker with the     ability to intercept network traffic can exploit this     issue to disclose or manipulate transmitted data by     spoofing the TLS/SSL server using a certificate that     appears valid. Note that this issue only affects     versions 5.2 and 5.3. (CVE-2016-3739)

  - A flaw exists in cURL and libcurl when loading dynamic     link library (DLL) files security.dll, secur32.dll, or     ws2_32.dll due searching an insecure path which may not     be trusted or under user control. A local attacker can     exploit this, via a Trojan DLL file placed in the search     path, to execute arbitrary code with the privileges of     the user running the program. (CVE-2016-4802)

  - A security bypass vulnerability exists in Apache Tomcat     due to an unspecified flaw related to web applications.
    A local attacker can exploit this, via a utility method     that is available to web applications, to bypass a     configured SecurityManager. (CVE-2016-5018)

  - An out-of-bounds access error exists in the Window     System (X11) subcomponent, specifically in the     XvQueryAdaptors() function in file Xv.c, when handling     server responses. An authenticated, remote attacker can     exploit this to impact confidentiality, integrity, and     availability. (CVE-2016-5407)

  - A use-after-free error exists in cURL and libcurl within     file lib/vtls/vtls.c due to the program attempting to     resume TLS sessions even if the client certificate     fails. An unauthenticated, remote attacker can exploit     this to bypass validation mechanisms, allowing the     attacker to possibly control which connection is used.
    (CVE-2016-5419)

  - A flaw exists in cURL and libcurl in the     Curl_ssl_config_matches() function within file     lib/vtls/vtls.c due to the program reusing TLS     connections with different client certificates. An     unauthenticated, remote attacker can exploit this to     disclose sensitive cross-realm information.
    (CVE-2016-5420)

  - A use-after-free error exists in cURL and libcurl in     in the close_all_connections() function within file     lib/multi.c due to connection pointers not being     properly cleared. An unauthenticated, remote attacker     can exploit this to have an unspecified impact on     confidentiality, integrity, and availability.
    (CVE-2016-5421)

  - A flaw exists in the tls_decrypt_ticket() function     in t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - A flaw exists in the SSL_peek() function in     rec_layer_s3.c due to improper handling of empty     records. An unauthenticated, remote attacker can exploit     this, by triggering a zero-length record in an SSL_peek     call, to cause an infinite loop, resulting in a denial     of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A denial of service vulnerability exists in the     state-machine implementation due to a failure to check     for an excessive length before allocating memory. An     unauthenticated, remote attacker can exploit this, via a     crafted TLS message, to exhaust memory resources.
    (CVE-2016-6307)

  - A denial of service vulnerability exists in the DTLS     implementation due to improper handling of excessively     long DTLS messages. An unauthenticated, remote attacker     can exploit this, via a crafted DTLS message, to exhaust     available memory resources. (CVE-2016-6308)

  - A flaw exists in Apache Tomcat within SecurityManager     due to improper restriction of access to system     properties by the configuration files system property     replacement feature. A local attacker can exploit this,     via a crafted web application, to bypass SecurityManager     restrictions and disclose system properties.
    (CVE-2016-6794)

  - A flaw exists in Apache Tomcat that allows a local     attacker to bypass a configured SecurityManager by     changing the configuration parameters for the JSP     Servlet. (CVE-2016-6796)

  - A flaw exists in Apache Tomcat due to a failure to limit     web application access to global JNDI resources. A local     attacker can exploit this to gain unauthorized access to     resources. (CVE-2016-6797)

  - A flaw exists in Apache Tomcat when handling request     lines containing certain invalid characters. An     unauthenticated, remote attacker can exploit this to     conduct HTTP response splitting attacks by injecting     additional headers into responses. (CVE-2016-6816)

  - An infinite loop condition exists in Apache Tomcat in     the HTTP/2 parser when handling overly large headers. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to cause a denial of service     condition. (CVE-2016-6817)

  - A carry propagation error exists in the     Broadwell-specific Montgomery multiplication procedure     when handling input lengths divisible by but longer than     256 bits. This can result in transient authentication     and key negotiation failures or reproducible erroneous     outcomes of public-key operations with specially crafted     input. A man-in-the-middle attacker can possibly exploit     this issue to compromise ECDH key negotiations that     utilize Brainpool P-512 curves. (CVE-2016-7055)

  - A flaw exists in cURL in the Curl_cookie_init() function     within file lib/cookie.c when handling cookies. An     unauthenticated, remote attacker can exploit this to     inject new cookies for arbitrary domains.
    (CVE-2016-8615)

  - A flaw exists in cURL in the ConnectionExists() function     within file lib/url.c when checking credentials supplied     for reused connections due to the comparison being     case-insensitive. An unauthenticated, remote attacker     can exploit this to authenticate without knowing the     proper case of the username and password.
    (CVE-2016-8616)

  - An integer overflow condition exists in cURL in the     base64_encode() function within file lib/base64.c due to     improper validation of certain input. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2016-8617)

  - A denial of service vulnerability exists in cURL in the     alloc_addbyter() function within file lib/mprintf.c due     to improper validation of overly long input when it is     supplied to the curl_maprintf() API method. An     unauthenticated, remote attacker can exploit this to     free already freed memory and thereby crash the program.
    (CVE-2016-8618)

  - A double-free error exists in cURL in the read_data()     function within file lib/security.c when handling     Kerberos authentication. An unauthenticated, remote     attacker can exploit this to free already freed memory,     resulting in an unspecified impact on confidentiality,     integrity, and availability. (CVE-2016-8619)

  - An out-of-bounds access error exists in cURL in file     tool_urlglob.c within the globbing feature. An     unauthenticated, remote attacker can exploit this to     disclose memory contents or execute arbitrary code.
    (CVE-2016-8620)

  - An out-of-bounds error exists in cURL in the parsedate()     function within file lib/parsedate.c when handling     dates. An unauthenticated, remote attacker can exploit     this to disclose memory contents or cause a denial of     service condition. (CVE-2016-8621)

  - An integer truncation error exists in cURL in the     curl_easy_unescape() function within file lib/escape.c     when handling overly large URLs. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2016-8622)

  - A use-after-free error exists in cURL within file     lib/cookie.c when handling shared cookies. An     unauthenticated, remote attacker can exploit this to     disclose memory contents. (CVE-2016-8623)

  - A flaw exists in cURL in the parseurlandfillconn()     function within file lib/url.c when parsing the     authority component of a URL with the host name part     ending in a '#' character. An unauthenticated, remote     attacker can exploit this to establish a connection to     a different host than intended. (CVE-2016-8624)

  - A flaw exists in cURL within International Domain Names     (IDNA) handling when translating domain names to puny     code for DNS resolving due to using the outdated IDNA     2003 standard instead of the IDNA 2008 standard, which     can result in incorrect translation of a domain name.
    An unauthenticated, remote attacker can exploit this to     cause network traffic to be redirected to a different     host than intended. (CVE-2016-8625)

  - A flaw exists in Apache Tomcat within the     catalina/mbeans/JmxRemoteLifecycleListener.java class     that is triggered during the deserialization of Java     objects. An unauthenticated, remote attacker can exploit     this to execute arbitrary code. (CVE-2016-8735)

  - A flaw exists in the Web Server component (Apache HTTP     Server) when handling whitespace patterns in User-Agent     headers. An authenticated, remote attacker can exploit     this, via a specially crafted User-Agent header, to     cause incorrect processing of sequences of requests,     resulting in incorrectly interpreting responses,     polluting the cache, or disclosing content from one     request to a second downstream user-agent.
    (CVE-2016-8743)

  - A NULL pointer dereference flaw exists within file     ssl/statem/statem_clnt.c when handling parameters for     the DHE or ECDHE key exchanges. An unauthenticated,     remote attacker can exploit this, via specially crafted     parameters, to cause a denial of service condition.
    (CVE-2017-3730)

  - A out-of-bounds read error exists exists in the Core     subcomponent, specifically in OpenSSL, when handling     packets using the CHACHA20/POLY1305 or RC4-MD5 ciphers.
    An unauthenticated, remote attacker can exploit this,     via specially crafted truncated packets, to cause a     denial of service condition. (CVE-2017-3731)

  - A carry propagating error exists in the x86_64     Montgomery squaring implementation that may cause the     BN_mod_exp() function to produce incorrect results. An     unauthenticated, remote attacker with sufficient     resources can exploit this to obtain sensitive     information regarding private keys. Note that this issue     is very similar to CVE-2015-3193. Moreover, the attacker     would additionally need online access to an unpatched     system using the target private key in a scenario with     persistent DH parameters and a private key that is     shared between multiple clients. For example, this can     occur by default in OpenSSL DHE based SSL/TLS cipher     suites. (CVE-2017-3732)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

cURLプロジェクトによる報告

- 他のサーバーへのCookieのインジェクション

- 大文字と小文字を区別しないパスワードの比較

- チェックされていない乗算によるOOB書き込み

- curl_maprintfにおける二重解放

- krb5コードにおける二重解放

- Globパーサーの領域外書き込み/読み取り

- curl_getdateの領域外読み取り

- 整数の切り捨てを介してURLがエスケープされていない形に変換されるヒープオーバーフロー

- 共有Cookieを介したメモリ解放後使用（Use After Free）

- 「#」を使用した無効なURL解析

- IDNA 2003によりcurlが誤ったホストを使用

リモート Redhat Enterprise Linux 6 / 7 ホストに、RHSA-2018:3558 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - curl: TLS セッション再開時のクライアント証明書のバイパス (CVE-2016-5419)

  - curl: 不適切なクライアント証明書による接続の再利用 (CVE-2016-5420)

  - curl: 解放後の接続構造の使用 (CVE-2016-5421)

  - curl: クライアント証明書の不適切な再利用 (CVE-2016-7141)

  - curl: エスケープ整数オーバーフローとアンエスケープ整数オーバーフロー (CVE-2016-7167)

  - curl: 他のサーバーの Cookie のインジェクション (CVE-2016-8615)

  - curl: 大文字と小文字を区別しないパスワードの比較 (CVE-2016-8616)

  - curl: 未確認の乗算を介した領域外書き込み (CVE-2016-8617)

  - curl: curl_maprintf の二重解放 (CVE-2016-8618)

  - curl: krb5 コードの二重解放 (CVE-2016-8619)

  - curl: Glob パーサーの領域外書き込み/読み取り (CVE-2016-8620)

  - curl: curl_getdate の領域外読み取り (CVE-2016-8621)

  - curl: 整数の切り捨てを介して URL がエスケープされていない形に変換されるヒープオーバーフロー (CVE-2016-8622)

  - curl: 共有 Cookie を介したメモリ解放後使用 (Use After Free) (CVE-2016-8623)

  - curl: 「#」を使用した無効な URL 解析 (CVE-2016-8624)

  - curl: IDNA 2003 による curl の誤ったホストの使用 (CVE-2016-8625)

  - curl: printf 浮動小数点バッファオーバーフロー (CVE-2016-9586)

  - curl: --write-out の領域外読み取り (CVE-2017-7407)

  - curl: 整数オーバーフロー経由の NTLM バッファオーバーフロー (CVE-2017-8816)

  - curl: FTP ワイルドカード領域外読み取り (CVE-2017-8817)

  - httpd: 小さすぎる Accept-Language 値の使用時の mod_authnz_ldap における領域外書き込み (CVE-2017-15710)

  - httpd: ファイル名の末尾の改行による <FilesMatch> バイパス (CVE-2017-15715)

  - curl: TFTP によるバッファサイズ以上の送信 (CVE-2017-1000100)

  - curl: 領域外読み取りの URL グロビング (CVE-2017-1000101)

  - curl: FTP PWD 応答パーサーの領域外読み取り (CVE-2017-1000254)

  - curl: IMAP FETCH 応答の領域外読み取り (CVE-2017-1000257)

  - httpd: mod_session でヘッダーが不適切に処理されるため、リモートのユーザーが CGI アプリケーションのセッションデータを変更する可能性があります (CVE-2018-1283)

  - httpd: HTTP リクエストの読み取り失敗後の領域外アクセス (CVE-2018-1301)

  - httpd: mod_cache_socache での領域外読み取りによってリモートの攻撃者が DoS を引き起こす可能性があります (CVE-2018-1303)

  - httpd: mod_auth_digest での Weak Digest 認証ノンス (CVE-2018-1312)

  - httpd: mod_http2: ワーカーに割り当てられた時間が過多のため DoS が生じる可能性があります (CVE-2018-1333)

  - httpd: 継続的 SETTINGS フレームによる HTTP/2 接続の DoS (CVE-2018-11763)

  - curl: 整数オーバーフローによる NTLM パスワードオーバーフロー (CVE-2018-14618)

  - curl: リダイレクトでの HTTP 認証リーク (CVE-2018-1000007)

  - curl: FTP パス偽装による NIL バイトの領域外書き込み (CVE-2018-1000120)

  - curl: LDAP NULL ポインターのデリファレンス (CVE-2018-1000121)

  - curl: RTSP RTP バッファオーバーリード (CVE-2018-1000122)

  - curl: RTSP ヘッダーがないときの領域外のヒープ読み込みにより、情報漏洩またはサービス拒否の可能性があります (CVE-2018-1000301)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Versions of cURL and libcurl prior to 7.51.0 are affected by multiple vulnerabilities :

 - A flaw exists in the International Domain Names (IDNA) handling when translating domain names to Punycode for DNS resolving. The issue is triggered as the outdated IDNA 2003 standard is used instead of IDNA 2008 for e.g. for the German 'LATIN SMALL LETTER SHARP S' Unicode character. This may result in incorrect translation for a domain name and in turn network traffic being directed to a different host than intended.
 - A flaw exists in the 'ConnectionExists()' function in 'lib/url.c' that is triggered when checking credentials supplied for reused connections, as the comparison is case-insensitive. This may allow a remote attacker to authenticate without knowing the proper case of the username and password.
 - An integer truncation flaw exists in the 'curl_easy_unescape()' function in 'lib/escape.c' that is triggered when handling overly large URLs. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially allowing the execution of arbitrary code.
 - An integer overflow condition exists in the 'base64_encode()' function in 'lib/base64.c' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially allowing the execution of arbitrary code.
 - A flaw exists in the 'alloc_addbyter()' function in 'lib/mprintf.c' that is triggered as overly long input is not properly validated when supplied to the 'curl_maprintf()' API method. This may allow a context-dependent attacker to free already freed memory and crash a process linked against the library.
 - A use-after-free error exists in 'lib/cookie.c' that is triggered when handling shared cookies. This may allow a context-dependent attacker to dereference already freed memory and potentially disclose memory contents.
 - A flaw exists in the 'parseurlandfillconn()' function in 'lib/url.c' that is triggered when parsing the authority component of an URL with the hostname part ending in a '#' character. This may allow a context-dependent attacker to establish a connection to a different host than intended.
 - A double-free error exists in the 'read_data()' function in 'lib/security.c' that is triggered when handling Kerberos authentication. This may allow a context-dependent attacker to free already freed memory and have an unspecified impact.
 - A flaw exists in the 'Curl_cookie_init()' function in 'lib/cookie.c' that is triggered when handling cookies. This may allow a context-dependent attacker to inject new cookies for arbitrary domains.
 - An out-of-bounds read flaw exists in the 'parsedate()' function in 'lib/parsedate.c' that is triggered when handling dates. This may allow a context-dependent attacker to crash a process linked against the library or potentially disclose memory contents.
 - An out-of-bounds access flaw exists in 'tool_urlglob.c' within the globbing feature. This may allow a context-dependent attacker to potentially disclose memory contents or execute arbitrary code.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
96644	GLSA-201701-47：cURL：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/1/20	2021/1/11	critical
194113	RHEL 6 / 7：httpd24 (RHSA-2018:3558)	Nessus	Red Hat Local Security Checks	2024/4/27	2024/4/27	critical
99930	Oracle Secure Global Desktop Multiple Vulnerabilities (April 2017 CPU) (SWEET32)	Nessus	Misc.	2017/5/2	2023/5/14	critical
194113	RHEL 6 / 7 : httpd24 (RHSA-2018:3558)	Nessus	Red Hat Local Security Checks	2024/4/27	2024/4/27	critical
94493	FreeBSD : cURL -- multiple vulnerabilities (765feb7d-a0d1-11e6-a881-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	2016/11/3	2021/1/4	critical
99881	EulerOS 2.0 SP1 : curl (EulerOS-SA-2017-1036)	Nessus	Huawei Local Security Checks	2017/5/1	2021/1/6	critical
99930	Oracle Secure Global Desktop Multiple Vulnerabilities (April 2017 CPU) (SWEET32)	Nessus	Misc.	2017/5/2	2023/5/14	critical
94493	FreeBSD : cURL -- 複数の脆弱性（765feb7d-a0d1-11e6-a881-b499baebfeaf）	Nessus	FreeBSD Local Security Checks	2016/11/3	2021/1/4	critical
194113	RHEL 6 / 7 : httpd24 (RHSA-2018:3558)	Nessus	Red Hat Local Security Checks	2024/4/27	2024/4/27	critical
99930	Oracle Secure Global Desktop の複数の脆弱性（2017年４月CPU）（SWEET32）	Nessus	Misc.	2017/5/2	2023/5/14	critical
9826	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/12/9	2019/3/6	high

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high