Lucene search
RedHatRHSA-2024:3998HistoryJun 20, 2024 - 4:58 a.m.
(RHSA-2024:3998) Moderate: curl security update
2024-06-2004:58:47
access.redhat.com
10
curl
security update
memory-leak
http/2
cvss score
cve-2024-2398
http
ftp
ldap
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
17.6%
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
- curl: HTTP/2 push headers memory-leak (CVE-2024-2398)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | ppc64le | libcurl | < 7.76.1-23.el9_2.7 | libcurl-7.76.1-23.el9_2.7.ppc64le.rpm |
| RedHat | 9 | aarch64 | curl-minimal | < 7.76.1-23.el9_2.7 | curl-minimal-7.76.1-23.el9_2.7.aarch64.rpm |
| RedHat | 9 | i686 | curl-minimal-debuginfo | < 7.76.1-23.el9_2.7 | curl-minimal-debuginfo-7.76.1-23.el9_2.7.i686.rpm |
| RedHat | 9 | aarch64 | curl-minimal-debuginfo | < 7.76.1-23.el9_2.7 | curl-minimal-debuginfo-7.76.1-23.el9_2.7.aarch64.rpm |
| RedHat | 9 | x86_64 | libcurl-minimal | < 7.76.1-23.el9_2.7 | libcurl-minimal-7.76.1-23.el9_2.7.x86_64.rpm |
| RedHat | 9 | x86_64 | libcurl | < 7.76.1-23.el9_2.7 | libcurl-7.76.1-23.el9_2.7.x86_64.rpm |
| RedHat | 9 | ppc64le | libcurl-devel | < 7.76.1-23.el9_2.7 | libcurl-devel-7.76.1-23.el9_2.7.ppc64le.rpm |
| RedHat | 9 | aarch64 | curl-debuginfo | < 7.76.1-23.el9_2.7 | curl-debuginfo-7.76.1-23.el9_2.7.aarch64.rpm |
| RedHat | 9 | s390x | curl | < 7.76.1-23.el9_2.7 | curl-7.76.1-23.el9_2.7.s390x.rpm |
| RedHat | 9 | i686 | libcurl-devel | < 7.76.1-23.el9_2.7 | libcurl-devel-7.76.1-23.el9_2.7.i686.rpm |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2114)
2024-08-20 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2208)
2024-08-21 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2322)
2024-09-03 00:00:00
cvelist
cvelist
CVE-2024-2398 HTTP/2 push headers memory-leak
2024-03-27 07:55:48
nessus
nessus
CBL Mariner 2.0 Security Update: curl (CVE-2024-2398)
2024-08-06 00:00:00
Oracle Linux 8 : curl (ELSA-2024-5654)
2024-08-21 00:00:00
AlmaLinux 9 : curl (ALSA-2024:5529)
2024-08-21 00:00:00
osv
osv
Moderate: curl security update
2024-08-19 00:00:00
HTTP/2 push headers memory-leak
2024-03-27 08:00:00
curl vulnerability
2024-03-27 14:59:43
veracode
veracode
Memory Leakage
2024-04-06 00:29:16
debiancve
debiancve
CVE-2024-2398
2024-03-27 08:15:41
cgr
cgr
CVE-2024-2398 vulnerabilities
2024-05-19 03:07:16
almalinux
almalinux
Moderate: curl security update
2024-08-20 00:00:00
Moderate: curl security update
2024-08-19 00:00:00
f5
f5
K000140029: libcurl vulnerability CVE-2024-2398
2024-06-18 00:00:00
redhat
redhat
(RHSA-2024:5529) Moderate: curl security update
2024-08-19 00:59:44
ubuntu
ubuntu
curl vulnerability
2024-03-27 00:00:00
curl vulnerabilities
2024-03-27 00:00:00
curl vulnerabilities
2024-04-29 00:00:00
oraclelinux
oraclelinux
curl security update
2024-08-20 00:00:00
curl security update
2024-08-19 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-2398 affecting package curl for versions less than 8.8.0-1
2024-07-22 15:42:40
CVE-2024-2398 affecting package curl for versions less than 8.8.0-1
2024-08-05 03:22:58
wolfi
wolfi
CVE-2024-2398 vulnerabilities
2024-09-16 09:11:41
nvd
nvd
CVE-2024-2398
2024-03-27 08:15:41
hackerone
hackerone
Internet Bug Bounty: CVE-2024-2398: HTTP/2 push headers memory-leak
2024-03-31 20:25:17
curl: CVE-2024-2398: HTTP/2 push headers memory-leak
2024-03-05 16:56:33
alpinelinux
alpinelinux
CVE-2024-2398
2024-03-27 08:15:41
ibm
ibm
cve
cve
CVE-2024-2398
2024-03-27 08:15:41
redhatcve
redhatcve
CVE-2024-2398
2024-03-27 09:27:15
vulnrichment
vulnrichment
CVE-2024-2398 HTTP/2 push headers memory-leak
2024-03-27 07:55:48
ubuntucve
ubuntucve
CVE-2024-2398
2024-03-27 00:00:00
amazon
amazon
Medium: curl
2024-04-24 22:15:00
redos
redos
ROS-20240708-01
2024-07-08 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: curl-8.2.1-5.fc39
2024-04-25 01:20:28
[SECURITY] Fedora 40 Update: curl-8.6.0-8.fc40
2024-04-19 21:41:45
cloudfoundry
cloudfoundry
USN-6718-1: curl vulnerabilities | Cloud Foundry
2024-05-02 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0585
2024-03-27 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0233
2024-03-27 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0743
2024-03-27 00:00:00
aix
aix
mageia
mageia
Updated curl packages fix security vulnerabilities
2024-03-29 06:49:09
slackware
slackware
[slackware-security] curl
2024-03-27 19:16:33
ics
ics
Siemens SINEMA
2024-09-12 12:00:00
apple
apple
About the security content of macOS Monterey 12.7.6
2024-07-29 00:00:00
About the security content of macOS Ventura 13.6.8
2024-07-29 00:00:00
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
17.6%
Related for RHSA-2024:3998