Advisory ROSA-SA-2021-1818

🗓️ 02 Jul 2021 16:36:57Reported by ROSA LABType

Security vulnerability in cURL and libcurl versions 7.18.0 through 7.52.0 allowing spoofing of SSL servers and potential buffer overflow

Reporter	Title	Published	Views	Family All 907
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.52.0-alt1	21 Dec 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.53.0-alt1	22 Feb 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.42.1-alt1	29 Apr 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.52.1-alt1	23 Dec 201600:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL affect IBM Workload Scheduler	17 Jun 201815:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139)	31 Jan 201901:35	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Cobalt	any	noarch	curl	7.29.0	UNKNOWN

02 Jul 2021 16:36Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 36.5 - 9.8

EPSS0.09327

SSVC