The updated Curl Mageia 8 and 9 packages contain a patch to fix CVE-2023-46218 The Mageia 9 packages als contain a patch to fix CVE-2023-46219. Curl in Mageia 8 does not need that patch because it is not affected by that issue.

OSVersionArchitecturePackageVersionFilename
Mageia8noarchcurl< 7.74.0-1.15curl-7.74.0-1.15.mga8
Mageia9noarchcurl< 7.88.1-3.3curl-7.88.1-3.3.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	8	noarch	curl	< 7.74.0-1.15	curl-7.74.0-1.15.mga8
Mageia	9	noarch	curl	< 7.88.1-3.3	curl-7.88.1-3.3.mga9

References

bugs.mageia.org/show_bug.cgi?id=32599

openvas 31

fedora 2

amazon 2

ibm 16

nessus 57

osv 13

ubuntu 2

cloudfoundry 1

debian 2

photon 2

ubuntucve 2

redos 2

cbl_mariner 5

hackerone 3

wolfi 2

debiancve 2

cve 2

alpinelinux 2

cgr 2

redhatcve 2

prion 2

veracode 2

f5 2

cvelist 2

nvd 2

redhat 30

almalinux 2

aix 1

oraclelinux 2

rocky 1

ics 1

openvas

openSUSE: Security Advisory for curl (SUSE-SU-2023:4659-1)

2024-03-04 00:00:00

Fedora: Security Advisory for curl (FEDORA-2023-9de8973300)

2023-12-10 00:00:00

Fedora: Security Advisory for curl (FEDORA-2023-2121eca964)

2023-12-16 00:00:00

fedora

[SECURITY] Fedora 39 Update: curl-8.2.1-4.fc39

2023-12-10 01:37:35

[SECURITY] Fedora 38 Update: curl-8.0.1-6.fc38

2023-12-15 02:19:17

amazon

Low: curl

2024-01-03 21:04:00

Medium: curl

2024-04-24 22:15:00

ibm

Security Bulletin: Multiple vulnerabilities in libcURL affect IBM DevOps Code ClearCase.

2024-07-15 13:21:34

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty and libcurl may affect IBM Storage Protect Backup-Archive Client

2024-06-26 16:23:47

Security Bulletin: PowerSC is vulnerable to security restrictions bypass due to Curl (CVE-2023-46218, CVE-2023-46219, CVE-2024-0853)

2024-03-20 18:41:31

nessus

EulerOS 2.0 SP10 : curl (EulerOS-SA-2024-1310)

2024-03-12 00:00:00

EulerOS 2.0 SP10 : curl (EulerOS-SA-2024-1332)

2024-03-12 00:00:00

Amazon Linux 2 : curl (ALAS-2024-2385)

2024-01-09 00:00:00

osv

curl vulnerabilities

2023-12-06 12:11:58

HSTS long filename clears contents

2023-12-06 08:00:00

CVE-2023-46219

2023-12-12 02:15:06

ubuntu

curl vulnerabilities

2023-12-06 00:00:00

curl vulnerability

2024-02-19 00:00:00

cloudfoundry

USN-6535-1: curl vulnerabilities | Cloud Foundry

2024-03-18 00:00:00

debian

[SECURITY] [DSA 5587-1] curl security update

2023-12-23 19:13:59

[SECURITY] [DLA 3692-1] curl security update

2023-12-22 14:27:56

photon

Moderate Photon OS Security Update - PHSA-2024-5.0-0280

2024-05-28 00:00:00

Moderate Photon OS Security Update - PHSA-2024-4.0-0623

2024-06-04 00:00:00

ubuntucve

CVE-2023-46219

2023-12-06 00:00:00

CVE-2023-46218

2023-12-06 00:00:00

redos

ROS-20240704-08

2024-07-04 00:00:00

ROS-20240328-11

2024-03-28 00:00:00

cbl_mariner

CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1

2024-07-22 15:42:40

CVE-2023-46219 affecting package curl for versions less than 8.5.0-1

2024-01-14 22:46:30

CVE-2023-46218 affecting package cmake for versions less than 3.29.6-1

2024-07-22 15:42:40

hackerone

curl: CVE-2023-46219: HSTS long file name clears contents

2023-11-02 00:51:08

curl: CVE-2023-46218: cookie mixed case PSL bypass

2023-10-16 18:28:56

Internet Bug Bounty: curl cookie mixed case PSL bypass

2023-12-06 12:00:29

wolfi

CVE-2023-46219 vulnerabilities

2024-09-08 09:13:33

CVE-2023-46218 vulnerabilities

2024-09-08 09:13:33

debiancve

CVE-2023-46219

2023-12-12 02:15:06

CVE-2023-46218

2023-12-07 01:15:07

cve

CVE-2023-46219

2023-12-12 02:15:06

CVE-2023-46218

2023-12-07 01:15:07

alpinelinux

CVE-2023-46219

2023-12-12 02:15:06

CVE-2023-46218

2023-12-07 01:15:07

cgr

CVE-2023-46219 vulnerabilities

2024-05-19 03:07:16

CVE-2023-46218 vulnerabilities

2024-05-19 03:07:16

redhatcve

CVE-2023-46219

2023-12-06 09:47:45

CVE-2023-46218

2023-12-06 09:47:42

prion

Code injection

2023-12-12 02:15:00

Code injection

2023-12-07 01:15:00

veracode

Missing Encryption Of Sensitive Data

2023-12-08 01:03:15

Cookie Mixed Case PSL Bypass

2023-12-08 01:03:15

K000138641 : cURL vulnerability CVE-2023-46219

2024-02-17 00:00:00

K000138650 : cURL vulnerability CVE-2023-46218

2024-02-21 00:00:00

cvelist

CVE-2023-46219

2023-12-12 01:38:41

CVE-2023-46218

2023-12-07 01:10:34

nvd

CVE-2023-46219

2023-12-12 02:15:06

CVE-2023-46218

2023-12-07 01:15:07

redhat

(RHSA-2024:1316) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update

2024-03-18 16:18:02

(RHSA-2024:0434) Moderate: curl security update

2024-01-24 14:40:38

(RHSA-2024:0452) Moderate: curl security update

2024-01-24 14:40:52

almalinux

Moderate: curl security update

2024-03-05 00:00:00

Moderate: curl security and bug fix update

2024-04-02 00:00:00

aix

AIX is vulnerable to security restrictions bypass due to cURL libcurl (CVE-2023-46218)

2024-03-06 15:05:06

oraclelinux

curl security update

2024-03-06 00:00:00

curl security and bug fix update

2024-04-03 00:00:00

rocky

curl security and bug fix update

2024-04-05 14:55:53

ics

Siemens SIMATIC RTLS Locating Manager

2024-05-16 12:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

30.9%

JSON

Related for MGASA-2023-0345