AZL-34606 CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1

🗓️ 30 Mar 2023 20:15:07Reported by GoogleType

osv

osv🔗 osv.dev

AZL-34606 CVE-2023-27536: cmake <3.28.2-1 and libcurl <8.0.0 permit auth bypass via unsafe connection reuse.

Reporter	Title	Published	Views	Family All 217
FreeBSD	curl -- multiple vulnerabilities	20 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a libcurl vulnerability	11 Oct 202311:44	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC is vulnerable to aritrary code excecution due to curl (CVE-2023-27536, CVE-2023-28321)	8 Jul 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments	16 May 202322:43	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27536

21 Apr 2026 04:27Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.9

EPSS0.00011

cmake vulnerability older version cmake libcurl vulnerability connection reuse issue gssapi delegation change kerberos transfers risk authentication bypass