Universal Forwarder (Splunk) - vulnerabilities (CVEs)

62 CVEs, 0 in the last 30 days, 49 known versions, newest CVE from 2025-06-02. Vendor: Splunk.

CVEs of Universal Forwarder

• CVE-2025-20298 - CVSS 8 (high), 2025-06-02: In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in…
• CVE-2023-32712 - CVSS 8.6 (high), 2023-06-01: In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into…
• CVE-2023-27536 - CVSS 5.9 (medium), 2023-03-30: An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect…
• CVE-2023-27535 - CVSS 5.9 (medium), 2023-03-30: An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during…
• CVE-2023-27538 - CVSS 7.7 (high), 2023-03-30: An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH…
• CVE-2023-27534 - CVSS 8.8 (high), 2023-03-30: A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the…
• CVE-2023-27537 - CVSS 5.9 (medium), 2023-03-30: A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for…
• CVE-2023-27533 - CVSS 9.8 (critical), 2023-03-30: A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted…
• CVE-2023-23916 - CVSS 6.5 (medium), 2023-02-23: An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that…
• CVE-2023-23915 - CVSS 6.5 (medium), 2023-02-23: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when…
• CVE-2023-23914 - CVSS 9.1 (critical), 2023-02-23: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are…
• CVE-2022-43552 - CVSS 5.9 (medium), 2023-02-09: A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies…
• CVE-2022-43551 - CVSS 7.5 (high), 2022-12-23: A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use…
• CVE-2022-32221 - CVSS 9.8 (critical), 2022-12-05: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the…
• CVE-2022-35260 - CVSS 6.5 (medium), 2022-12-05: curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould…
• CVE-2022-36227 - CVSS 9.8 (critical), 2022-11-22: In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails,…
• CVE-2022-42915 - CVSS 8.1 (high), 2022-10-29: curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote…
• CVE-2022-42916 - CVSS 7.5 (high), 2022-10-29: In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS…
• CVE-2022-35252 - CVSS 3.7 (low), 2022-09-23: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver…
• CVE-2021-31566 - CVSS 7.8 (high), 2022-08-23: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of…
• CVE-2022-37439 - CVSS 5.5 (medium), 2022-08-16: In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result…
• CVE-2022-35737 - CVSS 7.5 (high), 2022-08-03: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
• CVE-2022-32206 - CVSS 6.5 (medium), 2022-07-07: curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different…
• CVE-2022-32205 - CVSS 4.3 (medium), 2022-07-07: A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large…
• CVE-2022-32208 - CVSS 5.9 (medium), 2022-07-07: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle…
• CVE-2022-32207 - CVSS 9.8 (critical), 2022-07-07: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a…
• CVE-2022-32156 - CVSS 8.1 (high), 2022-06-15: In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting…
• CVE-2022-30115 - CVSS 4.3 (medium), 2022-06-02: Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.…
• CVE-2022-27779 - CVSS 5.3 (medium), 2022-06-02: libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send…
• CVE-2022-27782 - CVSS 7.5 (high), 2022-06-02: libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps…
• CVE-2022-27781 - CVSS 7.5 (high), 2022-06-02: libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous…
• CVE-2022-27780 - CVSS 7.5 (high), 2022-06-02: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe…
• CVE-2022-27775 - CVSS 7.5 (high), 2022-06-02: An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with…
• CVE-2022-27774 - CVSS 5.7 (medium), 2022-06-02: An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract…
• CVE-2022-27778 - CVSS 8.1 (high), 2022-06-02: A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
• CVE-2022-27776 - CVSS 6.5 (medium), 2022-06-02: A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same…
• CVE-2022-22576 - CVSS 8.1 (high), 2022-05-26: An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without…
• CVE-2021-22947 - CVSS 5.9 (medium), 2021-09-29: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and…
• CVE-2021-22946 - CVSS 7.5 (high), 2021-09-29: A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command…
• CVE-2021-22945 - CVSS 9.1 (critical), 2021-09-23: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and…
• CVE-2021-22922 - CVSS 6.5 (medium), 2021-08-05: When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink…
• CVE-2021-22925 - CVSS 5.3 (medium), 2021-08-05: curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs…
• CVE-2021-22924 - CVSS 3.7 (low), 2021-08-05: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic,…
• CVE-2021-22923 - CVSS 5.3 (medium), 2021-08-05: When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same…
• CVE-2021-22926 - CVSS 7.5 (high), 2021-08-05: libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with…
• CVE-2021-30560 - CVSS 8.8 (high), 2021-08-03: Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2021-36976 - CVSS 6.5 (medium), 2021-07-20: libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
• CVE-2021-22901 - CVSS 8.1 (high), 2021-06-11: curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over…
• CVE-2021-22898 - CVSS 3.1 (low), 2021-06-11: curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send…
• CVE-2021-22897 - CVSS 5.3 (medium), 2021-06-11: curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is…
• CVE-2021-3520 - CVSS 9.8 (critical), 2021-06-02: There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling…
• CVE-2021-22890 - CVSS 4.3 (medium), 2021-04-01: curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session…
• CVE-2021-22876 - CVSS 5.3 (medium), 2021-04-01: curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP…
• CVE-2020-8286 - CVSS 7.5 (high), 2020-12-14: curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
• CVE-2020-8177 - CVSS 7.8 (high), 2020-12-14: curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J…
• CVE-2020-8285 - CVSS 7.5 (high), 2020-12-14: curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
• CVE-2020-8169 - CVSS 7.5 (high), 2020-12-14: curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to…
• CVE-2020-8284 - CVSS 3.7 (low), 2020-12-14: A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way…
• CVE-2020-8231 - CVSS 7.5 (high), 2020-12-14: Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
• CVE-2020-14155 - CVSS 5.3 (medium), 2020-06-15: libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
• CVE-2019-20838 - CVSS 7.5 (high), 2020-06-15: libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to…
• CVE-2019-20454 - CVSS 7.5 (high), 2020-02-14: An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode.…