Race Condition

🗓️ 28 Jul 2023 12:50:09Reported by Veracode Vulnerability DatabaseType

libcurl.so Race Condition Vulnerability in File Storag

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	22 Nov 202315:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed libcurl vulnerabilities affect IBM Safer Payments	11 Dec 202315:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
CBLMariner	CVE-2023-32001 affecting package rust for versions less than 1.72.0-2	11 Oct 202301:41	–	cbl_mariner
CBLMariner	CVE-2023-32001 affecting package curl for versions less than 8.2.1-1	18 Aug 202320:45	–	cbl_mariner
CBLMariner	CVE-2023-32001 affecting package tensorflow for versions less than 2.16.1-1	17 Apr 202422:02	–	cbl_mariner
Cloud Foundry	USN-6237-2: curl regression \| Cloud Foundry	10 Aug 202300:00	–	cloudfoundry
Cloud Foundry	USN-6237-1: curl vulnerabilities \| Cloud Foundry	18 Mar 202400:00	–	cloudfoundry
Chainguard	CVE-2023-32001 vulnerabilities	26 Jul 202321:15	–	cgr
Circl	CVE-2023-32001	25 Jul 202307:52	–	circl

Vulners

Node

curl curlMatch7.72.0-1debian

AND

libcurl.so libcurl.soRange4.8.0.debug–4.8.0cpp

Source	Link
github	www.github.com/curl/curl/blob/curl-8_2_1/lib/fopen.c
github	www.github.com/curl/curl/commit/d6d5c467697406198672a6992627961f043581e3
hackerone	www.hackerone.com/reports/2039870
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BGJ7POX4ATGERTSBFJPW2EQH4Z65PSZJ/
debian	www.debian.org/security/2023/dsa-5460

07 Nov 2023 20:51Current

6.8Medium risk

Vulners AI Score6.8