Lucene search
OracleLinuxELSA-2020-5002HistoryNov 12, 2020 - 12:00 a.m.
curl security update
2020-11-1200:00:00
linux.oracle.com
48
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
[7.29.0-59.0.1.1]
- Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724]
- Security Fixes [OraBug: 28939992]
- CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
- CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
- CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
- CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
- CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
- CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
- CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
- CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
- CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)
- Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch
[7.29.0-59.el7_9.1] - avoid overwriting a local file with -J (CVE-2020-8177)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | curl | < 7.29.0-59.0.1.el7_9.1 | curl-7.29.0-59.0.1.el7_9.1.src.rpm |
| oracle linux | 7 | aarch64 | curl | < 7.29.0-59.0.1.el7_9.1 | curl-7.29.0-59.0.1.el7_9.1.aarch64.rpm |
| oracle linux | 7 | aarch64 | libcurl | < 7.29.0-59.0.1.el7_9.1 | libcurl-7.29.0-59.0.1.el7_9.1.aarch64.rpm |
| oracle linux | 7 | aarch64 | libcurl-devel | < 7.29.0-59.0.1.el7_9.1 | libcurl-devel-7.29.0-59.0.1.el7_9.1.aarch64.rpm |
| oracle linux | 7 | src | curl | < 7.29.0-59.0.1.el7_9.1 | curl-7.29.0-59.0.1.el7_9.1.src.rpm |
| oracle linux | 7 | x86_64 | curl | < 7.29.0-59.0.1.el7_9.1 | curl-7.29.0-59.0.1.el7_9.1.x86_64.rpm |
| oracle linux | 7 | i686 | libcurl | < 7.29.0-59.0.1.el7_9.1 | libcurl-7.29.0-59.0.1.el7_9.1.i686.rpm |
| oracle linux | 7 | x86_64 | libcurl | < 7.29.0-59.0.1.el7_9.1 | libcurl-7.29.0-59.0.1.el7_9.1.x86_64.rpm |
| oracle linux | 7 | i686 | libcurl-devel | < 7.29.0-59.0.1.el7_9.1 | libcurl-devel-7.29.0-59.0.1.el7_9.1.i686.rpm |
| oracle linux | 7 | x86_64 | libcurl-devel | < 7.29.0-59.0.1.el7_9.1 | libcurl-devel-7.29.0-59.0.1.el7_9.1.x86_64.rpm |
Related
oraclelinux
oraclelinux
curl security update
2020-10-06 00:00:00
curl security and bug fix update
2020-04-06 00:00:00
curl security and bug fix update
2019-07-30 00:00:00
osv
osv
curl - security update
2016-11-17 00:00:00
curl - security update
2016-11-03 00:00:00
CVE-2016-8615
2018-08-01 06:29:00
nessus
nessus
Debian DLA-711-1 : curl security update
2016-11-18 00:00:00
OracleVM 3.4 : curl (OVMSA-2020-0035)
2020-09-02 00:00:00
Oracle Linux 6 / 7 : curl (ELSA-2019-4652)
2019-05-24 00:00:00
debian
debian
[SECURITY] [DLA 711-1] curl security update
2016-11-17 21:45:07
[SECURITY] [DSA 3705-1] curl security update
2016-11-03 23:07:00
[SECURITY] [DLA 1917-1] curl security update
2019-09-13 08:18:00
ibm
ibm
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2017-1036)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2017-1035)
2020-01-23 00:00:00
Debian Security Advisory DSA 3705-1 (curl - security update)
2016-11-03 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: curl-7.47.1-9.fc24
2016-11-06 00:28:22
[SECURITY] Fedora 25 Update: curl-7.51.0-1.fc25
2016-11-19 21:51:02
amazon
amazon
Medium: curl
2016-11-10 18:00:00
Medium: curl
2020-07-14 02:30:00
archlinux
archlinux
[ASA-201611-9] libcurl-gnutls: multiple issues
2016-11-03 00:00:00
[ASA-201611-8] libcurl-compat: multiple issues
2016-11-03 00:00:00
[ASA-201611-4] lib32-curl: multiple issues
2016-11-02 00:00:00
suse
suse
Security update for curl (important)
2016-11-02 16:07:53
Security update for curl (important)
2016-11-10 17:06:47
Security update for curl (important)
2016-11-03 15:08:42
slackware
slackware
[slackware-security] curl
2016-11-04 03:34:42
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.51.0-alt1
2016-11-02 00:00:00
freebsd
freebsd
cURL -- multiple vulnerabilities
2016-11-02 00:00:00
cloudfoundry
cloudfoundry
USN-3123-1: curl vulnerabilities | Cloud Foundry
2016-12-13 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2016-11-03 00:00:00
curl vulnerability
2019-09-12 00:00:00
myhack58
myhack58
mageia
mageia
Updated curl packages fix security vulnerability
2018-01-03 19:40:26
gentoo
gentoo
cURL: Multiple vulnerabilities
2017-01-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1818
2021-07-02 16:36:57
f5
f5
K26899353 : libcurl vulnerability CVE-2016-8621
2017-04-19 00:00:00
K01006862 : cURL and libcurl vulnerability CVE-2016-8615
2017-04-12 00:00:00
K84940705 : cURL and libcurl vulnerability CVE-2016-8623
2017-04-14 00:00:00
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2018-07-18 10:26:30
Remote Security Bypass
2018-08-02 06:56:35
Cookie Injection
2018-08-17 07:05:06
ubuntucve
ubuntucve
alpinelinux
alpinelinux
redhat
redhat
(RHSA-2018:2486) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update
2018-08-16 16:05:21
(RHSA-2020:4599) Moderate: curl security and bug fix update
2020-11-03 12:19:12
(RHSA-2021:0877) Moderate: curl security update
2021-03-16 13:07:11
redhatcve
redhatcve
prion
prion
cve
cve
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
hackerone
hackerone
curl: curl overwrite local file with -J
2020-05-30 13:08:39
checkpoint_advisories
checkpoint_advisories
Haxx Curl Buffer Overflow (CVE-2019-5482)
2020-02-25 00:00:00
symantec
symantec
curl/libcURL CVE-2019-5482 Heap Buffer Overflow Vulnerability
2019-08-31 00:00:00
redos
redos
ROS-2-634
2021-09-08 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-8177 affecting package curl 7.68.0-5
2021-01-11 21:49:35
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for ELSA-2020-5002