SUSE CVE-2022-32208

🗓️ 15 Feb 2023 03:25:23Reported by Suse CVEType

susecve

susecve🔗 www.suse.com👁 3 Views

Curl older than 7.84.0 with Kerberos FTP may fail verification, enabling man in the middle and data injection.

Reporter	Title	Published	Views	Family All 210
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Copy Data Management (CVE-2022-32206, CVE-2022-32208)	7 Oct 202218:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in cURL libcurl (CVE-2022-32208)	31 Mar 202316:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module uses libcurl with multiple known vulnerabilities (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cURL libcurl ( CVE-2022-32208, CVE-2022-32206 )	29 Jul 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	15 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	19 Jan 202320:14	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
SUSE Linux Enterprise Server	12.2	any	curl	7.37.0-37.79.1	curl-7.37.0-37.79.1.noarch.rpm
SUSE Linux Enterprise Server	12.3	any	curl	7.37.0-37.79.1	curl-7.37.0-37.79.1.noarch.rpm
SUSE Linux Enterprise Server	11.3	any	curl	7.37.0-70.83.1	curl-7.37.0-70.83.1.noarch.rpm
SUSE Linux Enterprise Server	12.5	any	curl	7.60.0-11.43.1	curl-7.60.0-11.43.1.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	12.5	any	curl	7.60.0-11.43.1	curl-7.60.0-11.43.1.noarch.rpm
SUSE Linux Enterprise Server	15	any	curl	7.60.0-150000.33.1	curl-7.60.0-150000.33.1.noarch.rpm
SUSE Linux Enterprise Server	15.1	any	curl	7.60.0-150000.33.1	curl-7.60.0-150000.33.1.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	15	any	curl	7.60.0-150000.33.1	curl-7.60.0-150000.33.1.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	15.1	any	curl	7.60.0-150000.33.1	curl-7.60.0-150000.33.1.noarch.rpm
SUSE Linux Enterprise Server	12.4	any	curl	7.60.0-4.38.1	curl-7.60.0-4.38.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2022-32208
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1200737
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011436.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011443.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011444.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011445.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011446.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011447.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-July/011448.html

03 Jul 2026 04:47Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.6

EPSS0.05595

curl ftp transfers kerberos five man in middle data injection vulnerability unix