Lucene search
GoogleOSV:ALSA-2024:1601HistoryApr 02, 2024 - 12:00 a.m.
Moderate: curl security and bug fix update
2024-04-0200:00:00
Google
osv.dev
8
curl security
bug fix
libcurl library
http
ftp
ldap
information disclosure
post-after-put confusion
cookie injection
cve page
libssh
sftp packet size
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
- curl: information disclosure by exploiting a mixed case flaw (CVE-2023-46218)
- curl: more POST-after-PUT confusion (CVE-2023-28322)
- curl: cookie injection with none file (CVE-2023-38546)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- libssh (curl sftp) not trying password auth (BZ#2240033)
- libssh: cap SFTP packet size sent (AlmaLinux-5485)
References
Related
nessus
nessus
CentOS 8 : curl (CESA-2024:1601)
2024-04-02 00:00:00
Rocky Linux 8 : curl (RLSA-2024:1601)
2024-04-05 00:00:00
RHEL 8 : curl (RHSA-2024:1601)
2024-04-02 00:00:00
osv
osv
Moderate: curl security and bug fix update
2024-04-05 14:55:53
curl - security update
2023-12-19 00:00:00
curl - security update
2023-12-23 00:00:00
rocky
rocky
curl security and bug fix update
2024-04-05 14:55:53
oraclelinux
oraclelinux
curl security and bug fix update
2024-04-03 00:00:00
curl security update
2024-03-06 00:00:00
redhat
redhat
(RHSA-2024:1601) Moderate: curl security and bug fix update
2024-04-02 14:56:52
(RHSA-2024:0585) Moderate: curl security and bug fix update
2024-01-30 12:53:25
almalinux
almalinux
Moderate: curl security and bug fix update
2024-04-02 00:00:00
Moderate: curl security update
2024-03-05 00:00:00
Important: curl security update
2023-11-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3692-1)
2023-12-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4650-1)
2023-12-07 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1260)
2024-03-12 00:00:00
debian
debian
[SECURITY] [DLA 3692-1] curl security update
2023-12-22 14:28:17
[SECURITY] [DLA 3613-1] curl security update
2023-10-11 11:49:26
[SECURITY] [DSA 5523-1] curl security update
2023-10-11 06:59:12
ibm
ibm
prion
prion
Code injection
2023-12-07 01:15:00
Information disclosure
2023-05-26 21:15:00
Design/Logic Flaw
2023-10-18 04:15:00
hackerone
hackerone
Internet Bug Bounty: curl cookie mixed case PSL bypass
2023-12-06 12:00:29
curl: CVE-2023-46218: cookie mixed case PSL bypass
2023-10-16 18:28:56
Internet Bug Bounty: [CVE-2023-38546] cookie injection with none file
2023-10-19 10:01:36
aix
aix
AIX is vulnerable to security restrictions bypass due to cURL libcurl (CVE-2023-46218)
2024-03-06 15:05:06
Multiple vulnerabilities in cURL libcurl affect AIX
2023-12-11 13:22:02
alpinelinux
alpinelinux
wolfi
wolfi
CVE-2023-46218 vulnerabilities
2024-05-18 03:12:40
CVE-2023-38546 vulnerabilities
2024-05-18 03:12:40
cbl_mariner
cbl_mariner
CVE-2023-28322 affecting package curl for versions less than 8.0.1-2
2023-06-14 23:53:35
CVE-2023-28322 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
CVE-2023-28322 affecting package cmake for versions less than 3.21.4-6
2023-06-14 23:53:35
redhatcve
redhatcve
redos
redos
ROS-20240328-11
2024-03-28 00:00:00
debiancve
debiancve
veracode
veracode
Cookie Mixed Case PSL Bypass
2023-12-08 01:03:15
Use After Free
2023-06-04 10:55:34
Cookie Injection
2023-10-12 08:53:47
cvelist
cvelist
f5
f5
K000137211 : cURL vulnerabilities CVE-2023-38546
2023-10-11 00:00:00
K000138650 : cURL vulnerability CVE-2023-46218
2024-02-21 00:00:00
ubuntu
ubuntu
curl vulnerability
2024-02-19 00:00:00
curl vulnerability
2023-10-11 00:00:00
curl vulnerabilities
2023-10-17 00:00:00
ubuntucve
ubuntucve
cgr
cgr
CVE-2023-46218 vulnerabilities
2024-05-18 03:08:02
CVE-2023-38546 vulnerabilities
2024-05-18 03:08:02
cve
cve
amazon
amazon
cloudfoundry
cloudfoundry
USN-6429-2: curl vulnerability | Cloud Foundry
2023-12-04 00:00:00
USN-6535-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
cloudlinux
cloudlinux
curl: Fix of CVE-2023-38546
2023-10-16 13:58:12
mageia
mageia
Updated curl packages fix security vulnerabilities
2023-12-13 21:32:37
fedora
fedora
[SECURITY] Fedora 39 Update: curl-8.2.1-4.fc39
2023-12-10 01:37:35
[SECURITY] Fedora 38 Update: curl-8.0.1-6.fc38
2023-12-15 02:19:17
[SECURITY] Fedora 38 Update: curl-8.0.1-5.fc38
2023-10-14 01:32:18
slackware
slackware
[slackware-security] curl
2023-10-11 06:45:13
thn
thn