Total vulnerabilities in the database
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm() and siglongjmp(). When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
| Software | From | Fixed in |
|---|---|---|
| haxx / curl | - | 8.1.0 |
| apple / macos | 13.0 | 13.5 |
| apple / macos | 12.0 | 12.6.8 |
| apple / macos | 11.0 | 11.7.9 |