AZL-37078 CVE-2024-2398 affecting package curl for versions less than 8.8.0-1

🗓️ 27 Mar 2024 08:15:41Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

CVE-2024-2398: curl before 8.8.0-1 leaks memory on aborted HTTP two server push after 1000 headers.

Reporter	Title	Published	Views	Family All 244
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	26 Mar 202504:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	27 Sep 202422:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	27 Sep 202422:45	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2024-2398) and security restrictions bypass (CVE-2024-2466, CVE-2024-2004) due to cURL libcurl	22 Aug 202422:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Sep 202410:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to GNOME GLib, libcurl and kerberos 5	27 Sep 202411:38	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	22 May 202521:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	2 Dec 202416:09	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-2398

21 Apr 2026 04:28Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.6

EPSS0.02015

SSVC

curl vulnerability http two server push memory leak