Lucene search

K
fedoraFedoraFEDORA:08808304C3CC
HistoryFeb 19, 2023 - 1:39 a.m.

[SECURITY] Fedora 37 Update: curl-7.85.0-6.fc37

2023-02-1901:39:34
lists.fedoraproject.org
18
fedora
update
curl
command line tool
data transfer
ftp
ftps
http
https
scp
sftp
tftp
telnet
dict
ldap
ldaps
imap
smtp
pop3
rtsp
ssl certificates
http post
http put
ftp uploading
proxies
cookies
user+password authentication
file transfer resume
proxy tunneling
unix

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

53.6%

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, kerberos…), file transfer resume, proxy tunneling and a busload of other useful tricks.

OSVersionArchitecturePackageVersionFilename
Fedora37anycurl< 7.85.0UNKNOWN

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

53.6%