Lucene search
GoogleOSV:USN-5587-1HistorySep 01, 2022 - 9:04 p.m.
curl vulnerability
2022-09-0121:04:02
Google
osv.dev
11
curl
vulnerability
denial-of-service
cookies
http server
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
50.8%
Axel Chong discovered that when curl accepted and sent back
cookies containing control bytes that a HTTP(S) server might
return a 400 (Bad Request Error) response. A malicious cookie
host could possibly use this to cause denial-of-service.
Related
ubuntucve
ubuntucve
CVE-2022-35252
2022-08-31 00:00:00
hackerone
hackerone
curl: CVE-2022-35252: control code in cookie denial of service
2022-06-26 08:46:53
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0333)
2022-09-19 00:00:00
Ubuntu: Security Advisory (USN-5587-1)
2022-09-02 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-2757)
2022-11-14 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-2757)
2022-11-14 00:00:00
Siemens SCALANCE XCM332 Improper Validation of Syntactic Correctness of Input (CVE-2022-35252)
2023-05-02 00:00:00
Photon OS 4.0: Curl PHSA-2022-4.0-0240
2024-07-23 00:00:00
ubuntu
ubuntu
curl vulnerability
2022-09-01 00:00:00
osv
osv
curl-7.85.0-1.1 on GA media
2024-06-15 00:00:00
CVE-2022-35252
2022-09-23 14:15:12
control code in cookie denial of service
2022-08-31 08:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: curl-7.79.1-6.fc35
2022-09-19 01:21:12
[SECURITY] Fedora 37 Update: curl-7.85.0-1.fc37
2022-09-14 00:23:17
[SECURITY] Fedora 36 Update: curl-7.82.0-8.fc36
2022-09-06 10:05:29
cvelist
cvelist
CVE-2022-35252
2022-09-23 00:00:00
slackware
slackware
[slackware-security] curl
2022-09-01 03:09:16
redos
redos
ROS-20221007-01
2022-10-07 00:00:00
cloudfoundry
cloudfoundry
USN-5587-1: curl vulnerability | Cloud Foundry
2022-09-29 00:00:00
alpinelinux
alpinelinux
CVE-2022-35252
2022-09-23 14:15:12
veracode
veracode
Denial Of Service (DoS)
2022-09-01 05:02:48
ibm
ibm
mageia
mageia
Updated curl packages fix security vulnerability
2022-09-16 22:39:55
cbl_mariner
cbl_mariner
CVE-2022-35252 affecting package curl for versions less than 7.86.0-1
2022-11-16 02:26:15
CVE-2022-35252 affecting package curl 7.84.0-1
2022-11-24 00:45:35
suse
suse
Security update for curl (low)
2022-09-02 00:00:00
Security update for curl (low)
2022-09-02 00:00:00
nvd
nvd
CVE-2022-35252
2022-09-23 14:15:12
debiancve
debiancve
CVE-2022-35252
2022-09-23 14:15:12
redhatcve
redhatcve
CVE-2022-35252
2022-08-31 19:59:52
prion
prion
Design/Logic Flaw
2022-09-23 14:15:00
cve
cve
CVE-2022-35252
2022-09-23 14:15:12
redhat
redhat
(RHSA-2023:2963) Low: curl security and bug fix update
2023-05-16 05:59:21
(RHSA-2023:2478) Low: curl security update
2023-05-09 05:11:57
(RHSA-2024:0428) Moderate: curl security and bug fix update
2024-01-24 14:40:32
almalinux
almalinux
Low: curl security update
2023-05-09 00:00:00
Low: curl security and bug fix update
2023-05-16 00:00:00
oraclelinux
oraclelinux
curl security and bug fix update
2023-05-24 00:00:00
curl security update
2023-05-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0240
2022-09-05 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0240
2022-09-05 00:00:00
Critical Photon OS Security Update - PHSA-2022-0512
2022-09-06 00:00:00
debian
debian
[SECURITY] [DLA 3288-1] curl security update
2023-01-28 21:19:47
amazon
amazon
Medium: curl
2022-10-31 19:40:00
Medium: curl
2022-12-01 17:33:00
ics
ics
Siemens SINEC NMS Third-Party
2023-05-11 12:00:00
Siemens SCALANCE XCM332
2023-04-13 12:00:00
Siemens SINAMICS Medium Voltage Products
2023-06-15 12:00:00
apple
apple
About the security content of macOS Big Sur 11.7.3
2023-01-23 00:00:00
About the security content of macOS Monterey 12.6.3
2023-01-23 00:00:00
About the security content of macOS Ventura 13.1
2022-12-13 00:00:00
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
50.8%
Related for OSV:USN-5587-1