AZL-47028 CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2

🗓️ 24 Jul 2024 08:15:03Reported by GoogleType

osv_azl🔗 osv.dev👁 17 Views

Cmake versions before 3.30.3-2 are affected by a libcurl ASN1 parser bug freeing a local stack buffer.

Reporter	Title	Published	Views	Family All 100
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	11 Sep 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to stack overwrite due to the libcurl package (CVE-2024-6197)	2 Sep 202514:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to information disclosure, denial of service, and security restrictions bypass due to Curl	4 Dec 202422:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, IBM Java, and IBM Storage Protect Backup-Archive Client may affect IBM Storage Protect Backup-Archive Client	18 Oct 202412:50	–	ibm
AlpineLinux	CVE-2024-6197	24 Jul 202407:29	–	alpinelinux
BDU FSTEC	cURL ASN1 Parser Buffer Overflow	7 Aug 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-6197 affecting package curl for versions less than 8.8.0-2	15 Oct 202418:24	–	cbl_mariner
CBLMariner	CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2	1 Oct 202418:58	–	cbl_mariner
CBLMariner	CVE-2024-6197 affecting package curl for versions less than 8.8.0-2	12 Sep 202423:01	–	cbl_mariner