Very impressive results from Cure53: https://cure53.de/pentest-report_curl.pdf https://cure53.de/pentest-report_curl.pdf CRL -01-001 Malicious server can i

Very impressive results from Cure53: https://cure53.de/pentest-report_curl.pdf https://cure53.de/pentest-report_curl.pdf CRL -01-001 Malicious server can inject cookies for other servers ( Medium) CRL -01-002 ConnectionExists () compares passwords with strequal () ( Medium) CRL -01-005 OOB write via unchecked multiplication in base 64_ encode () ( High) CRL -01-007 Double - free in aprintf () via unsafe size _t multiplication ( Medium) CRL -01-009 Double - free in krb 5 read _ data () due to missing realloc () check ( High) CRL -01-011 FTPS TLS session reuse ( Low) CRL -01-013 Heap overflow via integer truncation ( Medium) CRL -01-014 Negative array index via integer overflow in unescape _ word () ( High) CRL -01-021 UAF via insufficient locking for shared cookies ( High) Miscellaneous Issues CRL -01-003 Ambiguity in curl _ easy _ escape () argument ( Low) CRL -01-004 Metalink provides an oracle ( Info) CRL -01-006 Potentially unsafe size _t multiplications ( Medium) CRL -01-008 % n is supported in format strings ( Low) CRL -01-010 Slashes and .. are decoded in file URIs ( Low) CRL -01-012 Only the md 5 of the SSH host key fingerprint is checked CRL -01-015 Default Compile - time options lack support for PIE and RELRO ( Low) CRL -01-016 Unchecked snprintf () calls ( Low) CRL -01-017 Permit disabling ( insecure ) fallbacks ( Low) CRL -01-018 Null pointer dereference in the RTSP protocol ( Low) CRL -01-019 nss _ init _ sslver uses version info from NSS header ( Info) CRL -01-020 dup _ nickname () doesn't check for memory allocation failure ( Low) CRL -01-022 polarssl _ connect _ step 1() lacks matching unlock ( Info) CRL -01-023 ssl _ thread _ setup () leaves mutex buffer partially uninitialised ( Info)