Lucene search
Gentoo FoundationMGASA-2024-0099HistoryMar 29, 2024 - 6:49 a.m.
Updated curl packages fix security vulnerabilities
2024-03-2906:49:09
Gentoo Foundation
advisories.mageia.org
30
curl
packages
security
vulnerabilities
cve-2024-2004
disabled protocol
cve-2024-2398
http/2
memory-leak
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.6%
CVE-2024-2004: Usage of disabled protocol If all protocols are disabled at run-time with none being added, curl/libcurl would still allow communication with the default set of allowed protocols, including some that are unencrypted. CVE-2024-2398: HTTP/2 push headers memory-leak A memory leak could occur when an application enabled HTTP/2 server push and the server sent a large number of headers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | curl | < 7.88.1-4.3 | curl-7.88.1-4.3.mga9 |
Related
osv
osv
curl-8.7.1-1.1 on GA media
2024-06-15 00:00:00
curl vulnerabilities
2024-03-27 11:43:38
curl vulnerabilities
2024-04-29 11:34:42
openvas
openvas
Slackware: Security Advisory (SSA:2024-087-01)
2024-03-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0099)
2024-04-05 00:00:00
openSUSE: Security Advisory for curl (SUSE-SU-2024:1151-1)
2024-04-09 00:00:00
nessus
nessus
RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 (RHSA-2024:2693)
2024-05-07 00:00:00
Amazon Linux 2 : curl (ALAS-2024-2526)
2024-04-30 00:00:00
ibm
ibm
Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl
2024-06-28 19:04:01
slackware
slackware
[slackware-security] curl
2024-03-27 19:16:33
aix
aix
redhat
redhat
(RHSA-2024:2694) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update
2024-05-07 15:42:50
(RHSA-2024:2693) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update
2024-05-07 15:42:47
(RHSA-2024:5529) Moderate: curl security update
2024-08-19 00:59:44
ics
ics
Siemens SINEMA
2024-09-12 12:00:00
amazon
amazon
Medium: curl
2024-04-24 22:15:00
redos
redos
ROS-20240708-01
2024-07-08 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: curl-8.2.1-5.fc39
2024-04-25 01:20:28
[SECURITY] Fedora 40 Update: curl-8.6.0-8.fc40
2024-04-19 21:41:45
ubuntu
ubuntu
curl vulnerabilities
2024-03-27 00:00:00
curl vulnerabilities
2024-04-29 00:00:00
curl vulnerability
2024-03-27 00:00:00
cloudfoundry
cloudfoundry
USN-6718-1: curl vulnerabilities | Cloud Foundry
2024-05-02 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0233
2024-03-27 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0585
2024-03-27 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0743
2024-03-27 00:00:00
gentoo
gentoo
curl: Multiple Vulnerabilities
2024-09-23 00:00:00
cve
cve
vulnrichment
vulnrichment
CVE-2024-2379 QUIC certificate check bypass with wolfSSL
2024-03-27 07:56:41
CVE-2024-2466 TLS certificate check bypass with mbedTLS
2024-03-27 07:58:24
CVE-2024-2398 HTTP/2 push headers memory-leak
2024-03-27 07:55:48
wolfi
wolfi
CVE-2024-2379 vulnerabilities
2024-10-04 09:12:11
CVE-2024-2466 vulnerabilities
2024-10-04 09:12:11
CVE-2024-2398 vulnerabilities
2024-10-04 09:12:11
alpinelinux
alpinelinux
hackerone
hackerone
veracode
veracode
Certificate Validation
2024-04-06 00:34:26
TLS Certificate Check Bypass
2024-04-05 02:09:20
Memory Leakage
2024-04-06 00:29:16
nvd
nvd
cbl_mariner
cbl_mariner
CVE-2024-2379 affecting package cmake for versions less than 3.30.3-1
2024-10-01 18:58:50
CVE-2024-2466 affecting package curl for versions less than 8.8.0-1
2024-08-05 03:22:58
CVE-2024-2466 affecting package cmake for versions less than 3.30.3-1
2024-10-01 18:58:50
ubuntucve
ubuntucve
redhatcve
redhatcve
debiancve
debiancve
cgr
cgr
CVE-2024-2379 vulnerabilities
2024-05-19 03:07:16
CVE-2024-2466 vulnerabilities
2024-05-19 03:07:16
CVE-2024-2398 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2024-2379 QUIC certificate check bypass with wolfSSL
2024-03-27 07:56:41
CVE-2024-2398 HTTP/2 push headers memory-leak
2024-03-27 07:55:48
CVE-2024-2466 TLS certificate check bypass with mbedTLS
2024-03-27 07:58:24
almalinux
almalinux
Moderate: curl security update
2024-08-20 00:00:00
Moderate: curl security update
2024-08-19 00:00:00
f5
f5
K000140029: libcurl vulnerability CVE-2024-2398
2024-06-18 00:00:00
oraclelinux
oraclelinux
curl security update
2024-08-20 00:00:00
curl security update
2024-08-19 00:00:00
apple
apple
About the security content of macOS Monterey 12.7.6
2024-07-29 00:00:00
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.6%
Related for MGASA-2024-0099