Lucene search
GoogleOSV:CVE-2023-27536HistoryMar 30, 2023 - 8:15 p.m.
CVE-2023-27536
2023-03-3020:15:07
Google
osv.dev
7
0.002 Low
EPSS
Percentile
59.7%
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| curl | eq | curl-7_74_0 | |
| curl | eq | 7.45.0-r0 | |
| curl | eq | curl-7_77_0 | |
| curl | eq | 7.21.5-r0 | |
| curl | eq | 7.33.0-r1 | |
| curl | eq | 7.75.0-r0 | |
| curl | eq | curl-7_78_0 | |
| curl | eq | 7.62.0-r2 | |
| curl | eq | curl-7_34_0 | |
| curl | eq | 7.27.0-r1 |
References
Related
cbl_mariner
cbl_mariner
CVE-2023-27536 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2023-27536 affecting package mysql for versions less than 8.0.34-1
2023-11-17 23:23:29
CVE-2023-27536 affecting package curl for versions less than 8.0.1-1
2023-04-16 00:48:11
veracode
veracode
Authentication Bypass
2023-03-21 00:30:20
hackerone
hackerone
curl: CVE-2023-27536: GSS delegation too eager connection re-use
2023-03-07 11:00:18
debiancve
debiancve
CVE-2023-27536
2023-03-30 20:15:07
cve
cve
CVE-2023-27536
2023-03-30 20:15:07
nessus
nessus
CBL Mariner 2.0 Security Update: curl (CVE-2023-27536)
2023-04-20 00:00:00
RHEL 8 : curl (RHSA-2023:4523)
2023-08-08 00:00:00
Oracle Linux 8 : curl (ELSA-2023-4523)
2023-08-15 00:00:00
alpinelinux
alpinelinux
CVE-2023-27536
2023-03-30 20:15:07
cvelist
cvelist
CVE-2023-27536
2023-03-30 00:00:00
redhatcve
redhatcve
CVE-2023-27536
2023-03-21 13:13:50
ubuntucve
ubuntucve
CVE-2023-27536
2023-03-20 00:00:00
ibm
ibm
prion
prion
Authentication flaw
2023-03-30 20:15:00
osv
osv
Moderate: curl security update
2023-10-06 23:10:01
Moderate: curl security update
2023-08-08 00:00:00
curl vulnerabilities
2023-03-27 14:47:58
redhat
redhat
(RHSA-2023:4523) Moderate: curl security update
2023-08-08 07:21:00
(RHSA-2023:6679) Moderate: curl security update
2023-11-07 06:11:52
(RHSA-2024:0428) Moderate: curl security and bug fix update
2024-01-24 14:40:32
oraclelinux
oraclelinux
curl security update
2023-08-10 00:00:00
curl security update
2023-11-11 00:00:00
rocky
rocky
curl security update
2023-10-06 23:10:01
almalinux
almalinux
Moderate: curl security update
2023-08-08 00:00:00
Moderate: curl security update
2023-11-07 00:00:00
cloudlinux
cloudlinux
curl: Fix of 3 CVEs
2023-04-14 16:45:12
amazon
amazon
Medium: curl
2023-04-13 19:01:00
Medium: curl
2023-06-05 16:39:00
ubuntu
ubuntu
curl vulnerabilities
2023-03-27 00:00:00
curl vulnerabilities
2023-03-20 00:00:00
cloudfoundry
cloudfoundry
USN-5964-2: curl vulnerabilities | Cloud Foundry
2023-04-24 00:00:00
USN-5964-1: curl vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-3395)
2023-12-14 00:00:00
Ubuntu: Security Advisory (USN-5964-2)
2023-03-28 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2328)
2023-07-10 00:00:00
debian
debian
[SECURITY] [DLA 3398-1] curl security update
2023-04-21 20:05:07
redos
redos
ROS-20230407-01
2023-04-07 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-14.fc36
2023-04-09 01:41:25
[SECURITY] Fedora 38 Update: curl-7.87.0-7.fc38
2023-03-29 00:19:18
[SECURITY] Fedora 37 Update: curl-7.85.0-8.fc37
2023-03-27 02:01:30
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0371
2023-04-06 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0564
2023-04-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2023-03-20 00:00:00
slackware
slackware
[slackware-security] curl
2023-03-20 19:35:43
mageia
mageia
Updated curl packages fix security vulnerability
2023-09-25 01:16:18
aix
aix
Multiple vulnerabilities cURL libcurl affect AIX
2023-06-29 09:35:59
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47