CURL-CVE-2024-7264 ASN.1 date parser overread

🗓️ 31 Jul 2024 08:00:00Reported by GoogleType

osv-curl🔗 osv.dev👁 36 Views

libcurl ASN.1 date parser overreads and potentially crashe

Reporter	Title	Published	Views	Family All 245
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	26 Mar 202504:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.	26 May 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	11 Sep 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager	15 Oct 202618:46	–	ibm
IBM Security Bulletins	Security Bulletin: vulnerability in libcURL affects IBM Workload Automation.	10 Jan 202513:42	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to information disclosure, denial of service, and security restrictions bypass due to Curl	4 Dec 202422:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module affected by multiple vulnerabilities	13 Nov 202417:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	12 Dec 202402:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libcURL affect IBM DevOps Code ClearCase.	4 Mar 202514:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in packages shipped with IBM CICS TX Advanced	25 Oct 202414:40	–	ibm

27 May 2026 02:29Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.3 - 6.5

EPSS0.20202

SSVC

libcurl asn.1 parser gtime2str generalized time parsing syntax error heap buffer crash curlinfo_certinfo security flaw