Lucene search
Veracode Vulnerability DatabaseVERACODE:41830HistoryJul 28, 2023 - 12:50 p.m.
Race Condition
2023-07-2812:50:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
32
0.0004 Low
EPSS
Percentile
8.3%
libcurl.so is vulnerable to a Race Condition. The library is susceptible to a TOCTOU race condition when it saves cookies, HSTS, and alt-svc data to a file. A victim might use the data for an intended purpose, but an attacker may overwrite the protected file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libcurl.so | le | 4.8.0 | |
| curl:sid | eq | 7.72.0-1 | |
| libcurl.so | le | 4.8.0 | |
| curl:sid | eq | 7.72.0-1 |
Related
nessus
nessus
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current curl Vulnerability (SSA:2023-200-01)
2023-07-19 00:00:00
EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-3003)
2024-01-16 00:00:00
EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2023-3374)
2024-01-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: curl-7.85.0-10.fc37
2023-08-01 01:32:25
[SECURITY] Fedora 38 Update: curl-8.0.1-3.fc38
2023-07-22 01:23:13
cbl_mariner
cbl_mariner
CVE-2023-32001 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2023-32001 affecting package curl for versions less than 8.2.1-1
2023-08-18 20:45:02
CVE-2023-32001 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2880-1)
2023-07-20 00:00:00
Fedora: Security Advisory for curl (FEDORA-2023-6139d4e088)
2023-07-23 00:00:00
Debian: Security Advisory (DSA-5460-1)
2023-07-27 00:00:00
hackerone
hackerone
Internet Bug Bounty: [curl] CVE-2023-32001: fopen race condition
2023-07-21 03:35:02
curl: CVE-2023-32001: fopen race condition
2023-06-27 07:05:59
slackware
slackware
[slackware-security] curl
2023-07-19 20:41:36
redhatcve
redhatcve
CVE-2023-32001
2023-07-19 08:37:27
debian
debian
[SECURITY] [DSA 5460-1] curl security update
2023-07-26 19:37:19
debiancve
debiancve
CVE-2023-32001
2023-07-26 21:15:00
cgr
cgr
CVE-2023-32001 vulnerabilities
2024-01-25 17:18:02
wolfi
wolfi
CVE-2023-32001 vulnerabilities
2024-01-25 13:47:19
cve
cve
CVE-2023-32001
2023-07-26 21:15:10
prion
prion
Design/Logic Flaw
2023-07-26 21:15:00
ubuntucve
ubuntucve
CVE-2023-32001
2023-07-19 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0432
2023-07-19 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0616
2023-07-20 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0054
2023-07-19 00:00:00
ibm
ibm
ubuntu
ubuntu
curl regression
2023-07-19 00:00:00
curl vulnerabilities
2023-09-11 00:00:00
curl vulnerabilities
2023-07-19 00:00:00
cloudfoundry
cloudfoundry
USN-6237-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
USN-6237-2: curl regression | Cloud Foundry
2023-08-10 00:00:00
osv
osv
curl vulnerabilities
2023-07-19 12:11:55
curl vulnerabilities
2023-09-11 18:00:42
curl regression
2023-07-19 17:34:44
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00