Lucene search
GoogleOSV:USN-5495-1HistoryJun 27, 2022 - 2:14 p.m.
curl vulnerabilities
2022-06-2714:14:25
Google
osv.dev
3
Harry Sintonen discovered that curl incorrectly handled certain cookies.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 21.10, and Ubuntu 22.04 LTS. (CVE-2022-32205)
Harry Sintonen discovered that curl incorrectly handled certain HTTP compressions.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2022-32206)
Harry Sintonen incorrectly handled certain file permissions.
An attacker could possibly use this issue to expose sensitive information.
This issue only affected Ubuntu 21.10, and Ubuntu 22.04 LTS. (CVE-2022-32207)
Harry Sintonen discovered that curl incorrectly handled certain FTP-KRB messages.
An attacker could possibly use this to perform a machine-in-the-middle attack.
(CVE-2022-32208)
Related
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-6.fc36
2022-07-01 01:09:59
[SECURITY] Fedora 35 Update: curl-7.79.1-5.fc35
2022-07-15 01:36:25
openvas
openvas
Ubuntu: Security Advisory (USN-5495-1)
2022-06-28 00:00:00
Fedora: Security Advisory for curl (FEDORA-2022-8bd3bf5b40)
2022-07-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2305-1)
2022-07-07 00:00:00
freebsd
freebsd
cURL -- Multiple vulnerabilities
2022-06-27 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2022-07-05 22:11:26
nessus
nessus
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2022:2305-1)
2022-07-08 00:00:00
EulerOS 2.0 SP10 : curl (EulerOS-SA-2022-2426)
2022-10-08 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0412
2022-06-30 00:00:00
Critical Photon OS Security Update - PHSA-2022-3.0-0412
2022-06-30 00:00:00
Moderate Photon OS Security Update - PHSA-2022-0491
2022-06-30 00:00:00
slackware
slackware
[slackware-security] curl
2022-06-28 19:27:52
cloudfoundry
cloudfoundry
USN-5495-1: curl vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2022-06-27 00:00:00
curl vulnerabilities
2022-07-01 00:00:00
suse
suse
Security update for curl (important)
2022-07-06 00:00:00
Security update for curl (important)
2022-07-07 00:00:00
Security update for curl (important)
2022-09-01 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC
2023-01-19 20:14:45
oraclelinux
oraclelinux
curl security update
2022-08-25 00:00:00
curl security update
2022-08-24 00:00:00
redhat
redhat
(RHSA-2022:6157) Moderate: curl security update
2022-08-24 14:56:48
(RHSA-2022:6159) Moderate: curl security update
2022-08-24 15:12:40
amazon
amazon
Medium: curl
2022-10-31 19:40:00
Medium: curl
2022-12-01 17:33:00
almalinux
almalinux
Moderate: curl security update
2022-08-24 00:00:00
Moderate: curl security update
2022-08-24 00:00:00
rocky
rocky
curl security update
2022-08-24 14:56:48
curl security update
2022-08-24 15:12:40
osv
osv
Moderate: curl security update
2022-08-24 14:56:48
Moderate: curl security update
2022-08-24 00:00:00
Moderate: curl security update
2022-08-24 00:00:00
ics
ics
Siemens SCALANCE XCM332
2023-04-13 12:00:00
Siemens SCALANCE SC-600 Family
2022-12-15 12:00:00
Siemens SINAMICS Medium Voltage Products
2023-06-15 12:00:00
hackerone
hackerone
curl: CVE-2022-32208: FTP-KRB bad message verification
2022-06-02 20:12:35
curl: CVE-2022-32205: Set-Cookie denial of service
2022-05-13 19:53:49
Internet Bug Bounty: CVE-2022-32205: Set-Cookie denial of service
2022-06-27 07:01:28
redhatcve
redhatcve
nvd
nvd
debiancve
debiancve
cve
cve
alpinelinux
alpinelinux
prion
prion
Design/Logic Flaw
2022-07-07 13:15:00
Security feature bypass
2022-07-07 13:15:00
Code injection
2022-07-07 13:15:00
ubuntucve
ubuntucve
cbl_mariner
cbl_mariner
CVE-2022-32208 affecting package curl 7.76.0-9
2022-08-24 22:05:05
CVE-2022-32205 affecting package curl for versions less than 7.84.0-1
2022-08-03 21:15:00
CVE-2022-32205 affecting package curl 7.76.0-9
2022-08-24 22:05:05
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2022-07-01 13:37:35
Privilege Escalation
2022-07-01 13:39:27
Denial Of Service (DoS)
2022-06-29 00:04:45
debian
debian
[SECURITY] [DSA 5197-1] curl security update
2022-08-01 16:58:44
[SECURITY] [DLA 3085-1] curl security update
2022-08-28 23:00:51
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2221
2023-08-22 13:21:47
Advisory ROSA-SA-2023-2220
2023-08-22 13:18:19