Lucene search
RedHatRHSA-2020:0544HistoryFeb 18, 2020 - 1:56 p.m.
(RHSA-2020:0544) Moderate: curl security update
2020-02-1813:56:21
access.redhat.com
46
0.009 Low
EPSS
Percentile
82.8%
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
-
curl: HTTP authentication leak in redirects (CVE-2018-1000007)
-
curl: FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
-
curl: RTSP RTP buffer over-read (CVE-2018-1000122)
-
curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service (CVE-2018-1000301)
-
curl: LDAP NULL pointer dereference (CVE-2018-1000121)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc64 | libcurl | < 7.29.0-46.el7_5.1 | libcurl-7.29.0-46.el7_5.1.ppc64.rpm |
| RedHat | 7 | i686 | curl-debuginfo | < 7.29.0-46.el7_5.1 | curl-debuginfo-7.29.0-46.el7_5.1.i686.rpm |
| RedHat | 7 | s390x | curl | < 7.29.0-46.el7_5.1 | curl-7.29.0-46.el7_5.1.s390x.rpm |
| RedHat | 7 | s390 | libcurl | < 7.29.0-46.el7_5.1 | libcurl-7.29.0-46.el7_5.1.s390.rpm |
| RedHat | 7 | s390x | libcurl | < 7.29.0-46.el7_5.1 | libcurl-7.29.0-46.el7_5.1.s390x.rpm |
| RedHat | 7 | ppc64le | libcurl-devel | < 7.29.0-46.el7_5.1 | libcurl-devel-7.29.0-46.el7_5.1.ppc64le.rpm |
| RedHat | 7 | x86_64 | curl-debuginfo | < 7.29.0-46.el7_5.1 | curl-debuginfo-7.29.0-46.el7_5.1.x86_64.rpm |
| RedHat | 7 | s390x | libcurl-devel | < 7.29.0-46.el7_5.1 | libcurl-devel-7.29.0-46.el7_5.1.s390x.rpm |
| RedHat | 7 | ppc | libcurl | < 7.29.0-46.el7_5.1 | libcurl-7.29.0-46.el7_5.1.ppc.rpm |
| RedHat | 7 | x86_64 | libcurl-devel | < 7.29.0-46.el7_5.1 | libcurl-devel-7.29.0-46.el7_5.1.x86_64.rpm |
Related
amazon
amazon
nessus
nessus
NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Multiple Vulnerabilities (NS-SA-2019-0039)
2019-08-12 00:00:00
RHEL 7 : curl and nss-pem (RHSA-2018:3157)
2018-10-31 00:00:00
ibm
ibm
oraclelinux
oraclelinux
curl and nss-pem security and bug fix update
2018-11-05 00:00:00
redhat
redhat
(RHSA-2020:0594) Moderate: curl security update
2020-02-25 11:32:48
(RHSA-2018:3157) Moderate: curl and nss-pem security and bug fix update
2018-10-30 04:24:21
centos
centos
curl, libcurl, nss security update
2018-11-15 18:44:09
ubuntu
ubuntu
curl vulnerabilities
2018-05-24 00:00:00
curl vulnerabilities
2018-03-15 00:00:00
curl vulnerability
2018-02-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3598-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2018-1109)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:1323-1)
2021-06-09 00:00:00
debian
debian
[SECURITY] [DLA 1309-1] curl security update
2018-03-18 21:22:09
[SECURITY] [DSA 4136-1] curl security update
2018-03-14 21:36:51
[SECURITY] [DSA 4202-1] curl security update
2018-05-16 20:14:47
archlinux
archlinux
[ASA-201803-15] curl: multiple issues
2018-03-19 00:00:00
[ASA-201803-20] lib32-libcurl-gnutls: multiple issues
2018-03-19 00:00:00
[ASA-201803-18] lib32-libcurl-compat: multiple issues
2018-03-19 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: curl-7.55.1-10.fc27
2018-03-20 18:26:44
[SECURITY] Fedora 26 Update: curl-7.53.1-16.fc26
2018-03-20 17:38:42
[SECURITY] Fedora 28 Update: curl-7.59.0-2.fc28
2018-03-30 13:33:07
osv
osv
curl - security update
2018-03-18 00:00:00
curl - security update
2018-03-14 00:00:00
curl - security update
2018-05-16 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2018-04-08 00:00:00
cURL: Multiple vulnerabilities
2018-06-19 00:00:00
cloudfoundry
cloudfoundry
USN-3598-1: curl vulnerabilities | Cloud Foundry
2018-04-04 00:00:00
slackware
slackware
[slackware-security] curl
2018-03-16 04:18:28
photon
photon
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.59.0-alt1
2018-03-31 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2018-10-30 21:01:43
nvd
nvd
CVE-2018-1000301
2018-05-24 13:29:01
CVE-2018-1000121
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
cvelist
cvelist
CVE-2018-1000121
2018-03-14 18:00:00
CVE-2018-1000122
2018-03-14 18:00:00
CVE-2018-1000007
2018-01-24 22:00:00
debiancve
debiancve
CVE-2018-1000121
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
CVE-2018-1000301
2018-05-24 13:29:01
cve
cve
CVE-2018-1000120
2018-03-14 18:29:00
CVE-2018-1000122
2018-03-14 18:29:00
CVE-2018-1000121
2018-03-14 18:29:00
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:19:16
Buffer Overread
2018-05-28 07:06:06
Denial Of Service (DoS)
2019-05-16 03:19:17
ubuntucve
ubuntucve
CVE-2018-1000121
2018-03-14 00:00:00
CVE-2018-1000122
2018-03-14 00:00:00
CVE-2018-1000120
2018-03-14 00:00:00
redhatcve
redhatcve
CVE-2018-1000122
2018-03-14 07:49:32
CVE-2018-1000301
2018-05-16 07:49:32
CVE-2018-1000120
2018-03-14 07:49:14
prion
prion
Buffer overflow
2018-03-14 18:29:00
Heap overflow
2018-05-24 13:29:00
Null pointer dereference
2018-03-14 18:29:00
alpinelinux
alpinelinux
CVE-2018-1000301
2018-05-24 13:29:01
CVE-2018-1000120
2018-03-14 18:29:00
CVE-2018-1000121
2018-03-14 18:29:00
f5
f5
K22052524 : cURL and libcurl vulnerability CVE-2018-1000120
2018-04-13 00:00:00
github
github
curl FTP path confusion leads to NIL byte out of bounds write
2022-05-14 00:58:02
hackerone
hackerone
curl: Proxy-Authorization header carried to a new host on a redirect
2021-01-25 02:37:39
freebsd
freebsd
cURL -- Multiple vulnerabilities
2018-01-24 00:00:00
suse
suse
Security update for curl (moderate)
2018-05-18 18:07:02
Security update for curl (moderate)
2018-06-09 15:09:49
symantec
symantec
cURL/libcURL CVE-2018-1000007 Information Disclosure Vulnerability
2018-01-24 00:00:00
rubygems
rubygems
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-01 21:00:00