[ASA-201710-3] lib32-curl: multiple issues

🗓️ 05 Oct 2017 00:00:00Reported by ArchLinuxType

lib32-curl: multiple issues including information disclosure and denial of service. Upgrade to version 7.56.0-

Reporter	Title	Published	Views	Family All 225
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.55.0-alt1	9 Aug 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.56.0-alt1	4 Oct 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-1000254)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM Chassis Management Module (CVE-2017-1000100)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the libcURL component of Tivoli Netcool/OMNIbus (CVE-2017-1000100)	17 Jun 201815:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcurl affects IBM Chassis Management Module (CVE-2017-1000254)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	lib32-curl	7.56.0-1	lib32-curl-7.56.0-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-371
curl	www.curl.haxx.se/docs/adv_20170809C.html
curl	www.curl.haxx.se/CVE-2017-1000099.patch
curl	www.curl.haxx.se/docs/adv_20170809B.html
curl	www.curl.haxx.se/CVE-2017-1000100.patch
curl	www.curl.haxx.se/docs/adv_20171004.html
curl	www.curl.haxx.se/CVE-2017-1000254.patch
github	www.github.com/curl/curl/commit/5ff2c5ff25750aba1a8f64fbcad8e5b891512584
security	www.security.archlinux.org/CVE-2017-1000099
security	www.security.archlinux.org/CVE-2017-1000100

05 Oct 2017 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 37.5

CVSS 3.16.5

EPSS0.01318

SSVC