Lucene search
RedHatRHSA-2023:5598HistoryOct 10, 2023 - 2:20 p.m.
(RHSA-2023:5598) Moderate: curl security update
2023-10-1014:20:03
access.redhat.com
18
curl
security update
idn wildcard match
post-after-put
cve page
moderate
certificate validation
libcurl
http
ftp
ldap
0.002 Low
EPSS
Percentile
56.6%
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
-
curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)
-
curl: more POST-after-PUT confusion (CVE-2023-28322)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | s390x | curl-debuginfo | < 7.76.1-14.el9_0.7 | curl-debuginfo-7.76.1-14.el9_0.7.s390x.rpm |
| RedHat | 9 | x86_64 | libcurl-debuginfo | < 7.76.1-14.el9_0.7 | libcurl-debuginfo-7.76.1-14.el9_0.7.x86_64.rpm |
| RedHat | 9 | aarch64 | libcurl | < 7.76.1-14.el9_0.7 | libcurl-7.76.1-14.el9_0.7.aarch64.rpm |
| RedHat | 9 | ppc64le | libcurl | < 7.76.1-14.el9_0.7 | libcurl-7.76.1-14.el9_0.7.ppc64le.rpm |
| RedHat | 9 | ppc64le | curl | < 7.76.1-14.el9_0.7 | curl-7.76.1-14.el9_0.7.ppc64le.rpm |
| RedHat | 9 | i686 | libcurl-minimal-debuginfo | < 7.76.1-14.el9_0.7 | libcurl-minimal-debuginfo-7.76.1-14.el9_0.7.i686.rpm |
| RedHat | 9 | ppc64le | libcurl-minimal-debuginfo | < 7.76.1-14.el9_0.7 | libcurl-minimal-debuginfo-7.76.1-14.el9_0.7.ppc64le.rpm |
| RedHat | 9 | s390x | libcurl-minimal-debuginfo | < 7.76.1-14.el9_0.7 | libcurl-minimal-debuginfo-7.76.1-14.el9_0.7.s390x.rpm |
| RedHat | 9 | x86_64 | curl-debugsource | < 7.76.1-14.el9_0.7 | curl-debugsource-7.76.1-14.el9_0.7.x86_64.rpm |
| RedHat | 9 | ppc64le | curl-minimal-debuginfo | < 7.76.1-14.el9_0.7 | curl-minimal-debuginfo-7.76.1-14.el9_0.7.ppc64le.rpm |
Related
nessus
nessus
Fedora 37 : curl (2023-8ed627bb04)
2023-06-08 00:00:00
EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2023-2537)
2023-08-02 00:00:00
Fedora 38 : curl (2023-37eac50e9b)
2023-06-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: curl-7.85.0-9.fc37
2023-06-08 02:00:39
[SECURITY] Fedora 38 Update: curl-8.0.1-2.fc38
2023-06-07 02:15:37
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2578)
2023-08-08 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2350)
2023-07-17 00:00:00
Fedora: Security Advisory for curl (FEDORA-2023-8ed627bb04)
2023-06-09 00:00:00
redhat
redhat
(RHSA-2023:4354) Moderate: curl security update
2023-08-01 07:58:15
(RHSA-2024:0585) Moderate: curl security and bug fix update
2024-01-30 12:53:25
(RHSA-2023:4523) Moderate: curl security update
2023-08-08 07:21:00
osv
osv
Moderate: curl security update
2023-08-01 00:00:00
curl vulnerabilities
2023-09-11 18:00:42
curl regression
2023-07-19 17:34:44
oraclelinux
oraclelinux
curl security update
2023-08-02 00:00:00
curl security update
2023-08-10 00:00:00
curl security and bug fix update
2024-04-03 00:00:00
almalinux
almalinux
Moderate: curl security update
2023-08-01 00:00:00
Moderate: curl security update
2023-08-08 00:00:00
Moderate: curl security and bug fix update
2024-04-02 00:00:00
cloudfoundry
cloudfoundry
USN-6237-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
USN-6237-2: curl regression | Cloud Foundry
2023-08-10 00:00:00
ibm
ibm
ubuntu
ubuntu
curl vulnerabilities
2023-09-11 00:00:00
curl vulnerabilities
2023-07-19 00:00:00
curl regression
2023-07-19 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2023-03-21 00:00:00
slackware
slackware
[slackware-security] curl
2023-05-17 21:00:11
redos
redos
ROS-20230621-04
2023-06-21 00:00:00
amazon
amazon
Medium: curl
2023-08-31 22:29:00
debiancve
debiancve
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
alpinelinux
alpinelinux
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
veracode
veracode
Use After Free
2023-06-04 10:55:34
Improper Certificate Validation
2023-06-07 10:17:40
Improper Certificate Validation
2023-06-06 16:56:36
hackerone
hackerone
Internet Bug Bounty: CVE-2023-28322: more POST-after-PUT confusion
2023-05-18 09:15:01
curl: CVE-2023-28321: IDN wildcard match
2023-04-17 16:54:15
Internet Bug Bounty: CVE-2023-28321: IDN wildcard match
2023-05-18 09:11:02
cbl_mariner
cbl_mariner
CVE-2023-28322 affecting package cmake for versions less than 3.21.4-10
2024-03-19 17:21:46
CVE-2023-28321 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
CVE-2023-28321 affecting package curl for versions less than 8.2.1-1
2023-08-18 20:45:02
nvd
nvd
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
redhatcve
redhatcve
CVE-2023-28322
2023-05-17 09:28:10
CVE-2023-28321
2023-05-17 09:27:51
prion
prion
Information disclosure
2023-05-26 21:15:00
Input validation
2023-05-26 21:15:00
cve
cve
CVE-2023-28322
2023-05-26 21:15:16
CVE-2023-28321
2023-05-26 21:15:16
cvelist
cvelist
CVE-2023-28321
2023-05-26 00:00:00
CVE-2023-28322
2023-05-26 00:00:00
ubuntucve
ubuntucve
CVE-2023-28322
2023-05-17 00:00:00
CVE-2023-28321
2023-05-17 00:00:00
rocky
rocky
curl security update
2023-10-06 23:10:01
curl security and bug fix update
2024-04-05 14:55:53
debian
debian
[SECURITY] [DLA 3613-1] curl security update
2023-10-11 11:49:02
[SECURITY] [DLA 3692-1] curl security update
2023-12-22 14:27:56
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0589
2023-05-31 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0399
2023-05-31 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0049
2023-07-14 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2023-09-25 01:16:18
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00