CVE-2023-28320

🗓️ 26 May 2023 21:15:15Reported by hackeroneType

A denial of service vulnerability in curl <v8.1.0 allows attackers to crash or misbehave multi-threaded applications by exploiting an unprotected global buffer

Reporter	Title	Published	Views	Family All 80
OSV	CVE-2023-28320	26 May 202321:15	–	osv
OSV	siglongjmp race condition	17 May 202308:00	–	osv
OSV	curl-8.1.0-1.1 on GA media	15 Jun 202400:00	–	osv
RedhatCVE	CVE-2023-28320	17 May 202309:27	–	redhatcve
Debian CVE	CVE-2023-28320	26 May 202321:15	–	debiancve
Tenable Nessus	Photon OS 4.0: Curl PHSA-2023-4.0-0426	24 Jul 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: mysql / rust / cmake / curl / tensorflow (CVE-2023-28320)	3 Jul 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : curl (SUSE-SU-2023:2227-1)	18 May 202300:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : curl (SUSE-SU-2023:2230-1)	18 May 202300:00	–	nessus
Tenable Nessus	FreeBSD : curl -- multiple vulnerabilities (a4f8bb03-f52f-11ed-9859-080027083a05)	19 May 202300:00	–	nessus

Nvd

Vulners

Node

haxx curlRange<8.1.0

Node

apple macosRange11.0–11.7.9

apple macosRange12.0–12.6.8

apple macosRange13.0–13.5

Node

netapp clustered_data_ontapMatch-

netapp ontap_antivirus_connectorMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "Fixed in 8.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213845
seclists	www.seclists.org/fulldisclosure/2023/Jul/52
seclists	www.seclists.org/fulldisclosure/2023/Jul/48
hackerone	www.hackerone.com/reports/1929597
seclists	www.seclists.org/fulldisclosure/2023/Jul/47
security	www.security.netapp.com/advisory/ntap-20230609-0009/
support	www.support.apple.com/kb/HT213843
support	www.support.apple.com/kb/HT213844
security	www.security.gentoo.org/glsa/202310-12

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 May 2023 21:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS35.9

EPSS0.002

curl denial of service vulnerability cve-2023-28320 nvd