Lucene search

K
fedoraFedoraFEDORA:CACF6203C951
HistoryOct 28, 2023 - 1:25 a.m.

[SECURITY] Fedora 37 Update: curl-7.85.0-12.fc37

2023-10-2801:25:37
lists.fedoraproject.org
24
fedora
curl
data transfer
url syntax
ftp
ftps
http
https
scp
sftp
tftp
telnet
dict
ldap
ldaps
ssl certificates
http post
http put
ftp uploading
proxies
cookies
authentication
file transfer resume
proxy tunneling
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos…), file transfer resume, proxy tunneling and a busload of other useful tricks.

OSVersionArchitecturePackageVersionFilename
Fedora37anycurl<Β 7.85.0UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%