PT-2024-5390

🗓️ 17 Apr 2024 00:00:00Reported by Positive TechnologiesType

Curl url get() may read beyond a 256-byte stack buffer in Punycode conversion, risking disclosure.

Reporter	Title	Published	Views	Family All 393
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcURL affect IBM Rational ClearCase ( CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-27774 )	25 Jul 202214:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libcURL affect IBM Rational ClearCase ( CVE-2022-42915, CVE-2022-42916, CVE-2022-32221, CVE-2022-35252, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207 )	31 Jan 202314:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module uses libcurl with multiple known vulnerabilities (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	11 Sep 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	19 Jan 202320:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AY18527.json
osv	www.osv.dev/vulnerability/CVE-2025-0167
osv	www.osv.dev/vulnerability/CVE-2020-8231
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-11053
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1000121
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-7264
osv	www.osv.dev/vulnerability/CVE-2021-22924
suse	www.suse.com/security/cve/CVE-2024-6874
osv	www.osv.dev/vulnerability/CVE-2022-32205
osv	www.osv.dev/vulnerability/CVE-2016-7167

18 Sep 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.13.1 - 8.1

CVSS 26.8

CVSS 36.5 - 8.1

EPSS0.27904

SSVC