curl -- multiple vulnerabilities

🗓️ 20 Mar 2023 00:00:00Reported by FreeBSDType

Multiple vulnerabilities in curl including TELNET protocol, SFTP paths, FTP connection reuse, GSS delegation, HSTS sharing

Reporter	Title	Published	Views	Family All 512
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by vulnerabilities in libcURL (CVE-2023-23916, CVE-2023-27535)	22 Jun 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Path Traversal in the RHEL UBI (CVE-2023-27534)	19 Jan 202421:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a libcurl vulnerability	11 Oct 202311:44	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC is vulnerable to aritrary code excecution due to curl (CVE-2023-27536, CVE-2023-28321)	8 Jul 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by libcurl vulnerability	11 Oct 202311:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Netezza Appliance	16 Apr 202610:52	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
FreeBSD	any	noarch	curl	8.0.0	UNKNOWN

Source	Link
curl	www.curl.se/docs/security.html

20 Mar 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8 - 9.8

EPSS0.00179

SSVC