Oracle Linux 9 : curl (ELSA-2022-6157)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6157 advisory. - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 Tenable has extracted the preceding descripti...

curl security update

7.76.1-14.el90.5 - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208...

CVE-2022-27782 affecting package curl 7.76.0-9

CVE-2022-27782 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-27781 affecting package curl 7.76.0-9

CVE-2022-27781 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-32208 affecting package curl 7.76.0-9

CVE-2022-32208 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-32205 affecting package curl 7.76.0-9

CVE-2022-32205 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-27779 affecting package curl 7.76.0-9

CVE-2022-27779 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

CVE-2022-27780 affecting package curl 7.76.0-9

CVE-2022-27780 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

CVE-2022-32206 affecting package curl 7.76.0-9

CVE-2022-32206 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

CVE-2022-30115 affecting package curl 7.76.0-9

CVE-2022-30115 affecting package curl 7.76.0-9. This CVE either no longer is or was never applicable...

CVE-2022-32207 affecting package curl 7.76.0-9

CVE-2022-32207 affecting package curl 7.76.0-9. An upgraded version of the package is available that resolves this issue...

curl: FTP-KRB bad message verification

A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client...

curl: HTTP compression denial of service

A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

curl: Unpreserved file permissions

A vulnerability was found in curl. This issue occurs because when curl saves cookies, alt-svc, and HSTS data to local files, it makes the operation atomic by finalizing the process with a rename from a temporary name to the final target file name. This flaw leads to unpreserved file permissions,...

curl: FTP-KRB bad message verification

A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

curl: HTTP compression denial of service

A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a...

curl security update

An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

RLSA-2022:6159 Moderate: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: FTP-KRB bad message verification CVE-2022-32208 For more...