CVE-2023-27537

🗓️ 30 Mar 2023 00:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 52 Views

A double free vulnerability in libcurl <8.0.0 when sharing HSTS data between separate "handles" leads to a potential use-after-free risk on UNIX systems

Reporter	Title	Published	Views	Family All 87
FreeBSD	curl -- multiple vulnerabilities	20 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX	29 Jun 202316:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway, Configuration Utility, VPN, Certificate and Base Module affected by multiple vulnerabilities	6 Jun 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Samba, Golang, Curl, and openssl can affect IBM Spectrum Protect Plus	8 Nov 202318:36	–	ibm
ATTACKERKB	CVE-2023-27537	30 Mar 202320:15	–	attackerkb

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	12	all	curl	7.88.1-7	curl_7.88.1-7_all.deb
Debian	13	all	curl	7.88.1-7	curl_7.88.1-7_all.deb
Debian	14	all	curl	7.88.1-7	curl_7.88.1-7_all.deb
Debian	999	all	curl	7.88.1-7	curl_7.88.1-7_all.deb

30 Mar 2023 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9

EPSS0.01856