Lucene search
AlmaLinuxALSA-2023:0333HistoryJan 23, 2023 - 12:00 a.m.
Moderate: curl security update
2023-01-2300:00:00
errata.almalinux.org
29
curl
libcurl
security fix
http
ftp
ldap
cve-2022-32221
protocols
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
79.8%
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
- curl: POST following PUT confusion (CVE-2022-32221)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | libcurl-devel | < 7.76.1-19.el9_1.1 | libcurl-devel-7.76.1-19.el9_1.1.i686.rpm |
| almalinux | 9 | x86_64 | libcurl-devel | < 7.76.1-19.el9_1.1 | libcurl-devel-7.76.1-19.el9_1.1.x86_64.rpm |
| almalinux | 9 | ppc64le | libcurl-devel | < 7.76.1-19.el9_1.1 | libcurl-devel-7.76.1-19.el9_1.1.ppc64le.rpm |
| almalinux | 9 | aarch64 | libcurl-devel | < 7.76.1-19.el9_1.1 | libcurl-devel-7.76.1-19.el9_1.1.aarch64.rpm |
| almalinux | 9 | s390x | libcurl-devel | < 7.76.1-19.el9_1.1 | libcurl-devel-7.76.1-19.el9_1.1.s390x.rpm |
| almalinux | 9 | i686 | libcurl | < 7.76.1-19.el9_1.1 | libcurl-7.76.1-19.el9_1.1.i686.rpm |
| almalinux | 9 | i686 | libcurl-minimal | < 7.76.1-19.el9_1.1 | libcurl-minimal-7.76.1-19.el9_1.1.i686.rpm |
| almalinux | 9 | ppc64le | curl | < 7.76.1-19.el9_1.1 | curl-7.76.1-19.el9_1.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | libcurl-minimal | < 7.76.1-19.el9_1.1 | libcurl-minimal-7.76.1-19.el9_1.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | curl-minimal | < 7.76.1-19.el9_1.1 | curl-minimal-7.76.1-19.el9_1.1.ppc64le.rpm |
Related
nessus
nessus
EulerOS Virtualization 3.0.2.0 : curl (EulerOS-SA-2023-1715)
2023-05-07 00:00:00
EulerOS 2.0 SP9 : curl (EulerOS-SA-2023-1095)
2023-01-06 00:00:00
EulerOS 2.0 SP9 : curl (EulerOS-SA-2023-1119)
2023-01-06 00:00:00
nvd
nvd
CVE-2022-32221
2022-12-05 22:15:10
prion
prion
Design/Logic Flaw
2022-12-05 22:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1496)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1715)
2023-05-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3769-1)
2022-10-27 00:00:00
rocky
rocky
curl security update
2023-01-23 14:30:22
ibm
ibm
osv
osv
POST following PUT confusion
2022-10-26 08:00:00
Moderate: curl security update
2023-01-23 00:00:00
Moderate: curl security update
2023-01-23 14:30:22
cvelist
cvelist
CVE-2022-32221
2022-12-05 00:00:00
redhat
redhat
(RHSA-2023:0333) Moderate: curl security update
2023-01-23 14:30:22
(RHSA-2023:4139) Moderate: curl security update
2023-07-18 07:24:38
cgr
cgr
CVE-2022-32221 vulnerabilities
2024-05-19 03:07:16
aix
aix
AIX is vulnerable to security restrictions bypass due to curl
2023-05-26 09:26:13
cloudlinux
cloudlinux
curl: Fix of CVE-2022-32221
2022-12-15 17:42:45
alpinelinux
alpinelinux
CVE-2022-32221
2022-12-05 22:15:10
hackerone
hackerone
curl: CVE-2022-32221: POST following PUT confusion
2022-09-18 23:27:44
Internet Bug Bounty: POST following PUT confusion
2022-10-26 14:34:05
curl: CVE-2023-28322: more POST-after-PUT confusion
2023-04-19 13:43:09
veracode
veracode
Denial Of Service (DoS)
2022-10-30 13:32:34
ubuntucve
ubuntucve
CVE-2022-32221
2022-10-26 00:00:00
cve
cve
CVE-2022-32221
2022-12-05 22:15:10
cbl_mariner
cbl_mariner
CVE-2022-32221 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
debiancve
debiancve
CVE-2022-32221
2022-12-05 22:15:10
ubuntu
ubuntu
curl vulnerability
2022-10-26 00:00:00
curl vulnerabilities
2022-10-26 00:00:00
MySQL vulnerabilities
2023-01-24 00:00:00
suse
suse
Security update for curl (important)
2022-10-26 00:00:00
Security update for curl (important)
2022-10-27 00:00:00
redhatcve
redhatcve
CVE-2022-32221
2022-10-26 14:23:07
wolfi
wolfi
CVE-2022-32221 vulnerabilities
2024-06-26 15:33:03
oraclelinux
oraclelinux
curl security update
2023-01-24 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2022-11-02 01:58:59
redos
redos
ROS-20221222-02
2022-12-22 00:00:00
debian
debian
[SECURITY] [DSA 5330-1] curl security update
2023-01-27 17:53:54
[SECURITY] [DLA 3288-1] curl security update
2023-01-28 21:19:47
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-9.fc36
2022-10-30 21:00:40
[SECURITY] Fedora 35 Update: curl-7.79.1-7.fc35
2022-11-10 16:21:52
[SECURITY] Fedora 37 Update: curl-7.85.0-2.fc37
2022-11-10 22:54:26
cloudfoundry
cloudfoundry
USN-5702-1: curl vulnerabilities | Cloud Foundry
2023-05-18 00:00:00
USN-5823-1: MySQL vulnerabilities | Cloud Foundry
2023-02-03 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2022-10-26 00:00:00
MySQL -- Multiple vulnerabilities
2023-01-20 00:00:00
slackware
slackware
[slackware-security] curl
2022-10-27 02:30:21
amazon
amazon
Medium: curl
2022-12-01 20:31:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2411
2024-05-02 09:04:51
ics
ics
Siemens SINEC NMS Third-Party
2023-05-11 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
apple
apple
About the security content of macOS Monterey 12.6.3
2023-01-23 00:00:00
About the security content of macOS Ventura 13.2
2023-01-23 00:00:00
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.007 Low
EPSS
Percentile
79.8%
Related for ALSA-2023:0333