Impact of curl and libcurl Vulnerabilities (CVE-2023-38545, CVE-2023-38546)

2023-10-1220:40:00

Palo Alto Networks Product Security Incident Response Team

securityadvisories.paloaltonetworks.com

palo alto networks

curl

libcurl

vulnerabilities

exploitation

threat prevention

threat id 94436.

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Palo Alto Networks Product Security Assurance team has evaluated the curl and libcurl vulnerabilities (CVE-2023-38545, CVE-2023-38546) that were disclosed on October 11, 2023 as they relate to our products.

At this time, there are no demonstrated scenarios that enable successful exploitation of these vulnerabilities in our products.

Work around:
Customers with a Threat Prevention subscription can block attacks for CVE-2023-38545 by enabling Threat ID 94436 (Applications and Threats content update 8764).