[ASA-201805-14] lib32-curl: multiple issues

🗓️ 18 May 2018 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 31 Views

lib32-curl multiple critical issues including arbitrary code execution and denial of servic

Reporter	Title	Published	Views	Family All 176
FreeBSD	cURL -- multiple vulnerabilities	16 May 201800:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Ubuntu affect IBM API Connect Developer Portal	23 Jun 201802:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System	10 Jun 201907:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cURL affects IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2018-1029)	12 Jun 201800:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	lib32-curl	7.60.0-1	lib32-curl-7.60.0-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-695
curl	www.curl.haxx.se/docs/adv_2018-82c2.html
curl	www.curl.haxx.se/CVE-2018-1000300.patch
curl	www.curl.haxx.se/docs/adv_2018-b138.html
curl	www.curl.haxx.se/CVE-2018-1000301.patch
security	www.security.archlinux.org/CVE-2018-1000300
security	www.security.archlinux.org/CVE-2018-1000301

18 May 2018 00:00Current

1.2Low risk

Vulners AI Score1.2

CVSS 27.5

CVSS 39.8

CVSS 3.19.1

EPSS0.02845

SSVC

lib32-curl critical arbitrary code execution denial of service cve-2018-1000300 cve-2018-1000301 upgrade