Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:generic/curl.se/curl@7.57.0
Typegeneric
Namespacecurl.se
Namecurl
Version7.57.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version8.20.0
Latest_non_vulnerable_version8.20.0
Affected_by_vulnerabilities
0
url VCID-18p4-rvxz-pkeu
vulnerability_id VCID-18p4-rvxz-pkeu
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22923.json
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22923.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22923
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.20998
published_at 2026-06-04T12:55:00Z
1
value 0.00068
scoring_system epss
scoring_elements 0.21072
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22923
2
reference_url https://curl.se/docs/CVE-2021-22923.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22923.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22923
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1213181
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:25:07Z/
url https://hackerone.com/reports/1213181
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1981438
reference_id 1981438
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1981438
7
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
8
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:25:07Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
10
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:25:07Z/
url https://security.gentoo.org/glsa/202212-01
11
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T14:25:07Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
12
reference_url https://access.redhat.com/errata/RHSA-2021:3582
reference_id RHSA-2021:3582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3582
13
reference_url https://access.redhat.com/errata/RHSA-2021:3903
reference_id RHSA-2021:3903
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3903
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22923
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-18p4-rvxz-pkeu
1
url VCID-1a1k-d4ez-ybdu
vulnerability_id VCID-1a1k-d4ez-ybdu
summary When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52551
published_at 2026-06-04T12:55:00Z
1
value 0.00289
scoring_system epss
scoring_elements 0.52611
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
2
reference_url https://curl.se/docs/CVE-2022-35252.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-35252.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1613943
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://hackerone.com/reports/1613943
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
reference_id 1018831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/21
reference_id 21
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/21
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
reference_id 2120718
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
10
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.gentoo.org/glsa/202212-01
11
reference_url https://support.apple.com/kb/HT213603
reference_id HT213603
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213603
12
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213604
13
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
14
reference_url https://security.netapp.com/advisory/ntap-20220930-0005/
reference_id ntap-20220930-0005
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.netapp.com/advisory/ntap-20220930-0005/
15
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
16
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
17
reference_url https://access.redhat.com/errata/RHSA-2023:2478
reference_id RHSA-2023:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2478
18
reference_url https://access.redhat.com/errata/RHSA-2023:2963
reference_id RHSA-2023:2963
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2963
19
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
20
reference_url https://usn.ubuntu.com/5587-1/
reference_id USN-5587-1
reference_type
scores
url https://usn.ubuntu.com/5587-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.85.0
purl pkg:generic/curl.se/curl@7.85.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-287k-bzqy-n7ag
4
vulnerability VCID-39qh-jayw-g3dh
5
vulnerability VCID-3p2z-61gq-muhs
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6en5-etsd-2bce
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-7wqd-99h2-e7hk
10
vulnerability VCID-85qb-zec7-subc
11
vulnerability VCID-a8z6-bswu-jue8
12
vulnerability VCID-azcz-b8f2-63be
13
vulnerability VCID-bcuq-n4vb-k7f3
14
vulnerability VCID-bx2m-n5ft-3be8
15
vulnerability VCID-cdzf-3ydt-8bdk
16
vulnerability VCID-cfry-nx5h-kudv
17
vulnerability VCID-f9nm-d5ax-qkcb
18
vulnerability VCID-fcb7-8163-muf4
19
vulnerability VCID-ffmg-djmk-57hn
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k3nv-gf9b-5ua2
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kq38-7s5x-nqaz
29
vulnerability VCID-mpuf-pp6z-q3d6
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-u1p8-s8vm-3yer
39
vulnerability VCID-v82t-s9e1-2fbw
40
vulnerability VCID-w472-84ep-fkdx
41
vulnerability VCID-w8ff-vxga-8qcz
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-y41p-tgpa-m7cs
45
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.85.0
aliases CVE-2022-35252
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1a1k-d4ez-ybdu
2
url VCID-1dw3-33ju-jkbs
vulnerability_id VCID-1dw3-33ju-jkbs
summary When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0725.json
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-0725.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-0725
reference_id
reference_type
scores
0
value 0.006
scoring_system epss
scoring_elements 0.69865
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-0725
2
reference_url https://curl.se/docs/CVE-2025-0725.html
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://curl.se/docs/CVE-2025-0725.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2956023
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://hackerone.com/reports/2956023
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2343899
reference_id 2343899
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2343899
7
reference_url https://curl.se/docs/CVE-2025-0725.json
reference_id CVE-2025-0725.json
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-05T14:33:50Z/
url https://curl.se/docs/CVE-2025-0725.json
fixed_packages
0
url pkg:generic/curl.se/curl@8.12.0
purl pkg:generic/curl.se/curl@8.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21ff-tazv-9ud3
1
vulnerability VCID-39qh-jayw-g3dh
2
vulnerability VCID-5un8-xymy-37bt
3
vulnerability VCID-7wqd-99h2-e7hk
4
vulnerability VCID-bcuq-n4vb-k7f3
5
vulnerability VCID-bp56-gy66-mqae
6
vulnerability VCID-ezve-gc2h-qyga
7
vulnerability VCID-f9nm-d5ax-qkcb
8
vulnerability VCID-fcb7-8163-muf4
9
vulnerability VCID-g7ux-4vz2-ckfg
10
vulnerability VCID-gux4-dncg-h7a6
11
vulnerability VCID-hhms-2hg6-nke9
12
vulnerability VCID-ns6z-wp2x-fkdq
13
vulnerability VCID-p155-gbtu-abg1
14
vulnerability VCID-secz-78pt-dben
15
vulnerability VCID-t45k-skv6-cfg2
16
vulnerability VCID-v82t-s9e1-2fbw
17
vulnerability VCID-w8ff-vxga-8qcz
18
vulnerability VCID-wgur-psum-pbck
19
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.12.0
aliases CVE-2025-0725
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1dw3-33ju-jkbs
3
url VCID-1kpz-55f1-f7dj
vulnerability_id VCID-1kpz-55f1-f7dj
summary curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14618
reference_id
reference_type
scores
0
value 0.00493
scoring_system epss
scoring_elements 0.661
published_at 2026-06-05T12:55:00Z
1
value 0.00493
scoring_system epss
scoring_elements 0.66048
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14618
2
reference_url https://curl.se/docs/CVE-2018-14618.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-14618.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1041605
reference_id 1041605
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url http://www.securitytracker.com/id/1041605
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1622707
reference_id 1622707
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1622707
7
reference_url https://usn.ubuntu.com/3765-1/
reference_id 3765-1
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://usn.ubuntu.com/3765-1/
8
reference_url https://usn.ubuntu.com/3765-2/
reference_id 3765-2
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://usn.ubuntu.com/3765-2/
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908327
reference_id 908327
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908327
10
reference_url https://curl.haxx.se/docs/CVE-2018-14618.html
reference_id CVE-2018-14618.html
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://curl.haxx.se/docs/CVE-2018-14618.html
11
reference_url https://www.debian.org/security/2018/dsa-4286
reference_id dsa-4286
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://www.debian.org/security/2018/dsa-4286
12
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://security.gentoo.org/glsa/201903-03
13
reference_url https://access.redhat.com/errata/RHSA-2019:1880
reference_id RHSA-2019:1880
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://access.redhat.com/errata/RHSA-2019:1880
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618
reference_id show_bug.cgi?id=CVE-2018-14618
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618
15
reference_url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014
reference_id SNWLID-2018-0014
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014
16
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:generic/curl.se/curl@7.61.1
purl pkg:generic/curl.se/curl@7.61.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-3ws4-1sak-r3ck
9
vulnerability VCID-4hha-2z31-2bf8
10
vulnerability VCID-4zcd-rbx3-qye5
11
vulnerability VCID-58p5-pfy3-xug1
12
vulnerability VCID-5un8-xymy-37bt
13
vulnerability VCID-738z-myg9-37hr
14
vulnerability VCID-7wqd-99h2-e7hk
15
vulnerability VCID-7yvu-s3p2-sfhc
16
vulnerability VCID-a58z-fu87-9ybs
17
vulnerability VCID-a8z6-bswu-jue8
18
vulnerability VCID-am31-t2h3-zbgw
19
vulnerability VCID-azcz-b8f2-63be
20
vulnerability VCID-bb6v-z8yg-6fe3
21
vulnerability VCID-bcuq-n4vb-k7f3
22
vulnerability VCID-bx2m-n5ft-3be8
23
vulnerability VCID-byzw-xw9s-pkga
24
vulnerability VCID-cdzf-3ydt-8bdk
25
vulnerability VCID-cfry-nx5h-kudv
26
vulnerability VCID-f7n8-zzhz-fuc8
27
vulnerability VCID-f9nm-d5ax-qkcb
28
vulnerability VCID-fcb7-8163-muf4
29
vulnerability VCID-fhc8-r8gv-bugj
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g7ux-4vz2-ckfg
32
vulnerability VCID-gud1-yg9u-zyfp
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-h6xj-mys4-pucf
35
vulnerability VCID-hhms-2hg6-nke9
36
vulnerability VCID-j688-cyfg-p7gu
37
vulnerability VCID-jnq1-hk6d-b3a3
38
vulnerability VCID-kkrm-dj79-4ucj
39
vulnerability VCID-kq38-7s5x-nqaz
40
vulnerability VCID-msd2-35g9-nyd2
41
vulnerability VCID-p97a-kjpp-f3d8
42
vulnerability VCID-q46r-7nct-s3bw
43
vulnerability VCID-q8tg-prj1-y7b8
44
vulnerability VCID-qrnc-7ywu-37cz
45
vulnerability VCID-r2g9-c896-rkge
46
vulnerability VCID-secz-78pt-dben
47
vulnerability VCID-sutv-qt2x-2yc7
48
vulnerability VCID-tcxd-z7f3-kkes
49
vulnerability VCID-td39-d3tf-vkhc
50
vulnerability VCID-ubnn-z97k-47gw
51
vulnerability VCID-uj78-2cgz-zbdb
52
vulnerability VCID-v82t-s9e1-2fbw
53
vulnerability VCID-vpkr-9akj-hbf6
54
vulnerability VCID-w472-84ep-fkdx
55
vulnerability VCID-w8ff-vxga-8qcz
56
vulnerability VCID-wbwx-5vg3-uqcd
57
vulnerability VCID-wmam-qmmg-6uay
58
vulnerability VCID-xgj8-zrta-kub9
59
vulnerability VCID-y41p-tgpa-m7cs
60
vulnerability VCID-y44u-23he-aya8
61
vulnerability VCID-yjtj-ydsg-u7ca
62
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.61.1
aliases CVE-2018-14618
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1kpz-55f1-f7dj
4
url VCID-1m1w-rayk-sffe
vulnerability_id VCID-1m1w-rayk-sffe
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22922.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22922.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22922
reference_id
reference_type
scores
0
value 0.00146
scoring_system epss
scoring_elements 0.34797
published_at 2026-06-05T12:55:00Z
1
value 0.00146
scoring_system epss
scoring_elements 0.347
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22922
2
reference_url https://curl.se/docs/CVE-2021-22922.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22922.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22922
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1213175
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://hackerone.com/reports/1213175
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1981435
reference_id 1981435
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1981435
7
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
8
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
10
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://security.gentoo.org/glsa/202212-01
11
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
12
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:09:24Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
16
reference_url https://access.redhat.com/errata/RHSA-2021:3582
reference_id RHSA-2021:3582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3582
17
reference_url https://access.redhat.com/errata/RHSA-2021:3903
reference_id RHSA-2021:3903
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3903
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22922
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1m1w-rayk-sffe
5
url VCID-1zsv-4jdy-63en
vulnerability_id VCID-1zsv-4jdy-63en
summary 
Improper Authentication
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27536.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27536.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27536
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01404
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27536
2
reference_url https://curl.se/docs/CVE-2023-27536.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27536.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1895135
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://hackerone.com/reports/1895135
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179092
reference_id 2179092
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179092
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27536
reference_id CVE-2023-27536
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27536
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
12
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
13
reference_url https://access.redhat.com/errata/RHSA-2023:4523
reference_id RHSA-2023:4523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4523
14
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
15
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
16
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
17
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27536
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1zsv-4jdy-63en
6
url VCID-21ff-tazv-9ud3
vulnerability_id VCID-21ff-tazv-9ud3
summary When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14524.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14524.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-14524
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08189
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-14524
2
reference_url https://curl.se/docs/CVE-2025-14524.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-09T19:24:54Z/
url https://curl.se/docs/CVE-2025-14524.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14524
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14524
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3459417
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-09T19:24:54Z/
url https://hackerone.com/reports/3459417
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2426407
reference_id 2426407
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2426407
7
reference_url https://curl.se/docs/CVE-2025-14524.json
reference_id CVE-2025-14524.json
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-09T19:24:54Z/
url https://curl.se/docs/CVE-2025-14524.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
9
reference_url https://usn.ubuntu.com/8062-1/
reference_id USN-8062-1
reference_type
scores
url https://usn.ubuntu.com/8062-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.18.0
purl pkg:generic/curl.se/curl@8.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-39qh-jayw-g3dh
1
vulnerability VCID-5un8-xymy-37bt
2
vulnerability VCID-9vbs-w124-q3au
3
vulnerability VCID-bcuq-n4vb-k7f3
4
vulnerability VCID-f9nm-d5ax-qkcb
5
vulnerability VCID-fxgf-t3ue-6qhf
6
vulnerability VCID-g7ux-4vz2-ckfg
7
vulnerability VCID-hhms-2hg6-nke9
8
vulnerability VCID-secz-78pt-dben
9
vulnerability VCID-w8ff-vxga-8qcz
10
vulnerability VCID-wgur-psum-pbck
11
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.18.0
aliases CVE-2025-14524
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-21ff-tazv-9ud3
7
url VCID-27bv-f11z-myak
vulnerability_id VCID-27bv-f11z-myak
summary curl: CURLOPT_SSLCERT mixup with Secure Transport
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22926.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22926.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22926
reference_id
reference_type
scores
0
value 0.00657
scoring_system epss
scoring_elements 0.7146
published_at 2026-06-05T12:55:00Z
1
value 0.00657
scoring_system epss
scoring_elements 0.71416
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22926
2
reference_url https://curl.se/docs/CVE-2021-22926.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22926.html
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://hackerone.com/reports/1234760
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://hackerone.com/reports/1234760
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2016088
reference_id 2016088
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2016088
6
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://security.gentoo.org/glsa/202212-01
7
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
8
reference_url https://security.netapp.com/advisory/ntap-20211022-0003/
reference_id ntap-20211022-0003
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://security.netapp.com/advisory/ntap-20211022-0003/
9
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:49:01Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22926
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-27bv-f11z-myak
8
url VCID-39qh-jayw-g3dh
vulnerability_id VCID-39qh-jayw-g3dh
summary curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1965.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1965.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-1965
reference_id
reference_type
scores
0
value 0.00073
scoring_system epss
scoring_elements 0.22244
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-1965
2
reference_url https://curl.se/docs/CVE-2026-1965.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:31:56Z/
url https://curl.se/docs/CVE-2026-1965.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2446448
reference_id 2446448
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2446448
6
reference_url https://curl.se/docs/CVE-2026-1965.json
reference_id CVE-2026-1965.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:31:56Z/
url https://curl.se/docs/CVE-2026-1965.json
7
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
8
reference_url https://usn.ubuntu.com/8084-1/
reference_id USN-8084-1
reference_type
scores
url https://usn.ubuntu.com/8084-1/
9
reference_url https://usn.ubuntu.com/8099-1/
reference_id USN-8099-1
reference_type
scores
url https://usn.ubuntu.com/8099-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.19.0
purl pkg:generic/curl.se/curl@8.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5un8-xymy-37bt
1
vulnerability VCID-9vbs-w124-q3au
2
vulnerability VCID-bcuq-n4vb-k7f3
3
vulnerability VCID-f9nm-d5ax-qkcb
4
vulnerability VCID-g7ux-4vz2-ckfg
5
vulnerability VCID-secz-78pt-dben
6
vulnerability VCID-w8ff-vxga-8qcz
7
vulnerability VCID-wgur-psum-pbck
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0
aliases CVE-2026-1965
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-39qh-jayw-g3dh
9
url VCID-3ws4-1sak-r3ck
vulnerability_id VCID-3ws4-1sak-r3ck
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16890
reference_id
reference_type
scores
0
value 0.01204
scoring_system epss
scoring_elements 0.79299
published_at 2026-06-05T12:55:00Z
1
value 0.01204
scoring_system epss
scoring_elements 0.79272
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16890
2
reference_url https://curl.se/docs/CVE-2018-16890.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16890.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106947
reference_id 106947
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url http://www.securityfocus.com/bid/106947
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670252
reference_id 1670252
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670252
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2018-16890.html
reference_id CVE-2018-16890.html
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://curl.haxx.se/docs/CVE-2018-16890.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://support.f5.com/csp/article/K03314397?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K03314397?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://support.f5.com/csp/article/K03314397?utm_source=f5support&amp%3Butm_medium=RSS
24
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
25
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://access.redhat.com/errata/RHSA-2019:3701
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890
reference_id show_bug.cgi?id=CVE-2018-16890
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:generic/curl.se/curl@7.64.0
purl pkg:generic/curl.se/curl@7.64.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-58p5-pfy3-xug1
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-f7n8-zzhz-fuc8
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-fp66-fzqt-6yg7
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g7ux-4vz2-ckfg
30
vulnerability VCID-gud1-yg9u-zyfp
31
vulnerability VCID-gueb-wzpx-ufb2
32
vulnerability VCID-h6xj-mys4-pucf
33
vulnerability VCID-hhms-2hg6-nke9
34
vulnerability VCID-j688-cyfg-p7gu
35
vulnerability VCID-jnq1-hk6d-b3a3
36
vulnerability VCID-kkrm-dj79-4ucj
37
vulnerability VCID-kn6z-caj8-bbc9
38
vulnerability VCID-kq38-7s5x-nqaz
39
vulnerability VCID-msd2-35g9-nyd2
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-r2g9-c896-rkge
44
vulnerability VCID-secz-78pt-dben
45
vulnerability VCID-sutv-qt2x-2yc7
46
vulnerability VCID-tcxd-z7f3-kkes
47
vulnerability VCID-td39-d3tf-vkhc
48
vulnerability VCID-uj78-2cgz-zbdb
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wmam-qmmg-6uay
55
vulnerability VCID-xc5k-47n9-43d6
56
vulnerability VCID-xgj8-zrta-kub9
57
vulnerability VCID-y41p-tgpa-m7cs
58
vulnerability VCID-y44u-23he-aya8
59
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.64.0
aliases CVE-2018-16890
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ws4-1sak-r3ck
10
url VCID-4hha-2z31-2bf8
vulnerability_id VCID-4hha-2z31-2bf8
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16839
reference_id
reference_type
scores
0
value 0.00346
scoring_system epss
scoring_elements 0.57384
published_at 2026-06-04T12:55:00Z
1
value 0.00346
scoring_system epss
scoring_elements 0.57437
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16839
2
reference_url https://curl.se/docs/CVE-2018-16839.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16839.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securitytracker.com/id/1042012
reference_id 1042012
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url http://www.securitytracker.com/id/1042012
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1642201
reference_id 1642201
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1642201
8
reference_url https://usn.ubuntu.com/3805-1/
reference_id 3805-1
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://usn.ubuntu.com/3805-1/
9
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
10
reference_url https://security.archlinux.org/ASA-201811-7
reference_id ASA-201811-7
reference_type
scores
url https://security.archlinux.org/ASA-201811-7
11
reference_url https://security.archlinux.org/ASA-201811-8
reference_id ASA-201811-8
reference_type
scores
url https://security.archlinux.org/ASA-201811-8
12
reference_url https://security.archlinux.org/ASA-201811-9
reference_id ASA-201811-9
reference_type
scores
url https://security.archlinux.org/ASA-201811-9
13
reference_url https://security.archlinux.org/AVG-796
reference_id AVG-796
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-796
14
reference_url https://security.archlinux.org/AVG-797
reference_id AVG-797
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-797
15
reference_url https://security.archlinux.org/AVG-798
reference_id AVG-798
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-798
16
reference_url https://curl.haxx.se/docs/CVE-2018-16839.html
reference_id CVE-2018-16839.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://curl.haxx.se/docs/CVE-2018-16839.html
17
reference_url https://www.debian.org/security/2018/dsa-4331
reference_id dsa-4331
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://www.debian.org/security/2018/dsa-4331
18
reference_url https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
reference_id f3a24d7916b9173c69a3e0ee790102993833d6c5
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
19
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://security.gentoo.org/glsa/201903-03
20
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839
reference_id show_bug.cgi?id=CVE-2018-16839
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839
fixed_packages
0
url pkg:generic/curl.se/curl@7.62.0
purl pkg:generic/curl.se/curl@7.62.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-3ws4-1sak-r3ck
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-58p5-pfy3-xug1
11
vulnerability VCID-5un8-xymy-37bt
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-7yvu-s3p2-sfhc
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bb6v-z8yg-6fe3
20
vulnerability VCID-bcuq-n4vb-k7f3
21
vulnerability VCID-bx2m-n5ft-3be8
22
vulnerability VCID-byzw-xw9s-pkga
23
vulnerability VCID-cdzf-3ydt-8bdk
24
vulnerability VCID-cfry-nx5h-kudv
25
vulnerability VCID-f7n8-zzhz-fuc8
26
vulnerability VCID-f9nm-d5ax-qkcb
27
vulnerability VCID-fcb7-8163-muf4
28
vulnerability VCID-fhc8-r8gv-bugj
29
vulnerability VCID-fp66-fzqt-6yg7
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g7ux-4vz2-ckfg
32
vulnerability VCID-gud1-yg9u-zyfp
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-h6xj-mys4-pucf
35
vulnerability VCID-hhms-2hg6-nke9
36
vulnerability VCID-j688-cyfg-p7gu
37
vulnerability VCID-jnq1-hk6d-b3a3
38
vulnerability VCID-kkrm-dj79-4ucj
39
vulnerability VCID-kq38-7s5x-nqaz
40
vulnerability VCID-msd2-35g9-nyd2
41
vulnerability VCID-p97a-kjpp-f3d8
42
vulnerability VCID-q46r-7nct-s3bw
43
vulnerability VCID-q8tg-prj1-y7b8
44
vulnerability VCID-qrnc-7ywu-37cz
45
vulnerability VCID-r2g9-c896-rkge
46
vulnerability VCID-secz-78pt-dben
47
vulnerability VCID-sutv-qt2x-2yc7
48
vulnerability VCID-tcxd-z7f3-kkes
49
vulnerability VCID-td39-d3tf-vkhc
50
vulnerability VCID-uj78-2cgz-zbdb
51
vulnerability VCID-v82t-s9e1-2fbw
52
vulnerability VCID-vpkr-9akj-hbf6
53
vulnerability VCID-w472-84ep-fkdx
54
vulnerability VCID-w8ff-vxga-8qcz
55
vulnerability VCID-wbwx-5vg3-uqcd
56
vulnerability VCID-wmam-qmmg-6uay
57
vulnerability VCID-xc5k-47n9-43d6
58
vulnerability VCID-xgj8-zrta-kub9
59
vulnerability VCID-y41p-tgpa-m7cs
60
vulnerability VCID-y44u-23he-aya8
61
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.62.0
aliases CVE-2018-16839
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4hha-2z31-2bf8
11
url VCID-4zcd-rbx3-qye5
vulnerability_id VCID-4zcd-rbx3-qye5
summary Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5482
reference_id
reference_type
scores
0
value 0.09715
scoring_system epss
scoring_elements 0.93078
published_at 2026-06-04T12:55:00Z
1
value 0.09715
scoring_system epss
scoring_elements 0.93089
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5482
2
reference_url https://curl.se/docs/CVE-2019-5482.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5482.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/684603
reference_id
reference_type
scores
url https://hackerone.com/reports/684603
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1749652
reference_id 1749652
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1749652
8
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://seclists.org/bugtraq/2020/Feb/36
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
reference_id 6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940010
reference_id 940010
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940010
11
reference_url https://security.archlinux.org/AVG-1982
reference_id AVG-1982
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1982
12
reference_url https://curl.haxx.se/docs/CVE-2019-5482.html
reference_id CVE-2019-5482.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://curl.haxx.se/docs/CVE-2019-5482.html
13
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://www.debian.org/security/2020/dsa-4633
14
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.gentoo.org/glsa/202003-29
15
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
reference_id msg00048.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
16
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
reference_id msg00055.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
17
reference_url https://security.netapp.com/advisory/ntap-20191004-0003/
reference_id ntap-20191004-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.netapp.com/advisory/ntap-20191004-0003/
18
reference_url https://security.netapp.com/advisory/ntap-20200416-0003/
reference_id ntap-20200416-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.netapp.com/advisory/ntap-20200416-0003/
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
reference_id RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
20
reference_url https://access.redhat.com/errata/RHSA-2020:0250
reference_id RHSA-2020:0250
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0250
21
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
22
reference_url https://access.redhat.com/errata/RHSA-2020:3916
reference_id RHSA-2020:3916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3916
23
reference_url https://access.redhat.com/errata/RHSA-2021:0759
reference_id RHSA-2021:0759
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0759
24
reference_url https://access.redhat.com/errata/RHSA-2021:0877
reference_id RHSA-2021:0877
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0877
25
reference_url https://access.redhat.com/errata/RHSA-2021:0949
reference_id RHSA-2021:0949
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0949
26
reference_url https://access.redhat.com/errata/RHSA-2021:1027
reference_id RHSA-2021:1027
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1027
27
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
reference_id UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
28
reference_url https://usn.ubuntu.com/4129-1/
reference_id USN-4129-1
reference_type
scores
url https://usn.ubuntu.com/4129-1/
29
reference_url https://usn.ubuntu.com/4129-2/
reference_id USN-4129-2
reference_type
scores
url https://usn.ubuntu.com/4129-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.66.0
purl pkg:generic/curl.se/curl@7.66.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-a58z-fu87-9ybs
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-am31-t2h3-zbgw
15
vulnerability VCID-azcz-b8f2-63be
16
vulnerability VCID-bcuq-n4vb-k7f3
17
vulnerability VCID-bx2m-n5ft-3be8
18
vulnerability VCID-byzw-xw9s-pkga
19
vulnerability VCID-cdzf-3ydt-8bdk
20
vulnerability VCID-cfry-nx5h-kudv
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f9nm-d5ax-qkcb
23
vulnerability VCID-fcb7-8163-muf4
24
vulnerability VCID-fhc8-r8gv-bugj
25
vulnerability VCID-fp66-fzqt-6yg7
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gud1-yg9u-zyfp
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-h6xj-mys4-pucf
31
vulnerability VCID-hhms-2hg6-nke9
32
vulnerability VCID-j688-cyfg-p7gu
33
vulnerability VCID-jnq1-hk6d-b3a3
34
vulnerability VCID-kkrm-dj79-4ucj
35
vulnerability VCID-kn6z-caj8-bbc9
36
vulnerability VCID-kq38-7s5x-nqaz
37
vulnerability VCID-msd2-35g9-nyd2
38
vulnerability VCID-p97a-kjpp-f3d8
39
vulnerability VCID-q46r-7nct-s3bw
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-secz-78pt-dben
43
vulnerability VCID-sutv-qt2x-2yc7
44
vulnerability VCID-td39-d3tf-vkhc
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wmam-qmmg-6uay
52
vulnerability VCID-xgj8-zrta-kub9
53
vulnerability VCID-y41p-tgpa-m7cs
54
vulnerability VCID-y44u-23he-aya8
55
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.66.0
aliases CVE-2019-5482
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4zcd-rbx3-qye5
12
url VCID-58p5-pfy3-xug1
vulnerability_id VCID-58p5-pfy3-xug1
summary A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5443.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5443
reference_id
reference_type
scores
0
value 0.00954
scoring_system epss
scoring_elements 0.7677
published_at 2026-06-04T12:55:00Z
1
value 0.00954
scoring_system epss
scoring_elements 0.76802
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5443
2
reference_url https://curl.se/docs/CVE-2019-5443.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5443.html
3
reference_url https://hackerone.com/reports/608577
reference_id
reference_type
scores
url https://hackerone.com/reports/608577
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1772100
reference_id 1772100
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1772100
fixed_packages
0
url pkg:generic/curl.se/curl@7.66.0
purl pkg:generic/curl.se/curl@7.66.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-a58z-fu87-9ybs
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-am31-t2h3-zbgw
15
vulnerability VCID-azcz-b8f2-63be
16
vulnerability VCID-bcuq-n4vb-k7f3
17
vulnerability VCID-bx2m-n5ft-3be8
18
vulnerability VCID-byzw-xw9s-pkga
19
vulnerability VCID-cdzf-3ydt-8bdk
20
vulnerability VCID-cfry-nx5h-kudv
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f9nm-d5ax-qkcb
23
vulnerability VCID-fcb7-8163-muf4
24
vulnerability VCID-fhc8-r8gv-bugj
25
vulnerability VCID-fp66-fzqt-6yg7
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gud1-yg9u-zyfp
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-h6xj-mys4-pucf
31
vulnerability VCID-hhms-2hg6-nke9
32
vulnerability VCID-j688-cyfg-p7gu
33
vulnerability VCID-jnq1-hk6d-b3a3
34
vulnerability VCID-kkrm-dj79-4ucj
35
vulnerability VCID-kn6z-caj8-bbc9
36
vulnerability VCID-kq38-7s5x-nqaz
37
vulnerability VCID-msd2-35g9-nyd2
38
vulnerability VCID-p97a-kjpp-f3d8
39
vulnerability VCID-q46r-7nct-s3bw
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-secz-78pt-dben
43
vulnerability VCID-sutv-qt2x-2yc7
44
vulnerability VCID-td39-d3tf-vkhc
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wmam-qmmg-6uay
52
vulnerability VCID-xgj8-zrta-kub9
53
vulnerability VCID-y41p-tgpa-m7cs
54
vulnerability VCID-y44u-23he-aya8
55
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.66.0
aliases CVE-2019-5443
risk_score 3.8
exploitability 0.5
weighted_severity 7.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-58p5-pfy3-xug1
13
url VCID-5ujs-47hf-g7gj
vulnerability_id VCID-5ujs-47hf-g7gj
summary A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000122
reference_id
reference_type
scores
0
value 0.01639
scoring_system epss
scoring_elements 0.82277
published_at 2026-06-04T12:55:00Z
1
value 0.01639
scoring_system epss
scoring_elements 0.82306
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000122
2
reference_url https://curl.se/docs/CVE-2018-1000122.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000122.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1553398
reference_id 1553398
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1553398
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
9
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
10
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
11
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
12
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
13
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
14
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
15
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
16
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
17
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
18
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
19
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
20
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
21
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:generic/curl.se/curl@7.59.0
purl pkg:generic/curl.se/curl@7.59.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-6745-tyba-33fa
15
vulnerability VCID-738z-myg9-37hr
16
vulnerability VCID-7wqd-99h2-e7hk
17
vulnerability VCID-7yvu-s3p2-sfhc
18
vulnerability VCID-a58z-fu87-9ybs
19
vulnerability VCID-a8z6-bswu-jue8
20
vulnerability VCID-am31-t2h3-zbgw
21
vulnerability VCID-azcz-b8f2-63be
22
vulnerability VCID-bb6v-z8yg-6fe3
23
vulnerability VCID-bcuq-n4vb-k7f3
24
vulnerability VCID-bx2m-n5ft-3be8
25
vulnerability VCID-cdzf-3ydt-8bdk
26
vulnerability VCID-cfry-nx5h-kudv
27
vulnerability VCID-f7n8-zzhz-fuc8
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fcb7-8163-muf4
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p97a-kjpp-f3d8
45
vulnerability VCID-q46r-7nct-s3bw
46
vulnerability VCID-q8tg-prj1-y7b8
47
vulnerability VCID-qrnc-7ywu-37cz
48
vulnerability VCID-r2g9-c896-rkge
49
vulnerability VCID-secz-78pt-dben
50
vulnerability VCID-sutv-qt2x-2yc7
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-ubnn-z97k-47gw
54
vulnerability VCID-uj78-2cgz-zbdb
55
vulnerability VCID-v82t-s9e1-2fbw
56
vulnerability VCID-vpkr-9akj-hbf6
57
vulnerability VCID-w472-84ep-fkdx
58
vulnerability VCID-w8ff-vxga-8qcz
59
vulnerability VCID-wbwx-5vg3-uqcd
60
vulnerability VCID-wmam-qmmg-6uay
61
vulnerability VCID-xgj8-zrta-kub9
62
vulnerability VCID-y41p-tgpa-m7cs
63
vulnerability VCID-y44u-23he-aya8
64
vulnerability VCID-yjtj-ydsg-u7ca
65
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.59.0
aliases CVE-2018-1000122
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ujs-47hf-g7gj
14
url VCID-5un8-xymy-37bt
vulnerability_id VCID-5un8-xymy-37bt
summary curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5773.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5773.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-5773
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05317
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-5773
2
reference_url https://curl.se/docs/CVE-2026-5773.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:45:00Z/
url https://curl.se/docs/CVE-2026-5773.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5773
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5773
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3650689
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:45:00Z/
url https://hackerone.com/reports/3650689
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461201
reference_id 2461201
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461201
7
reference_url https://curl.se/docs/CVE-2026-5773.json
reference_id CVE-2026-5773.json
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:45:00Z/
url https://curl.se/docs/CVE-2026-5773.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-5773
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5un8-xymy-37bt
15
url VCID-6745-tyba-33fa
vulnerability_id VCID-6745-tyba-33fa
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000301
reference_id
reference_type
scores
0
value 0.02845
scoring_system epss
scoring_elements 0.86486
published_at 2026-06-04T12:55:00Z
1
value 0.02845
scoring_system epss
scoring_elements 0.86509
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000301
2
reference_url https://curl.se/docs/CVE-2018-1000301.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000301.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301
4
reference_url http://www.securitytracker.com/id/1040931
reference_id 1040931
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url http://www.securitytracker.com/id/1040931
5
reference_url http://www.securityfocus.com/bid/104225
reference_id 104225
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url http://www.securityfocus.com/bid/104225
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1575536
reference_id 1575536
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1575536
7
reference_url https://usn.ubuntu.com/3648-1/
reference_id 3648-1
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://usn.ubuntu.com/3648-1/
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898856
reference_id 898856
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898856
9
reference_url https://curl.haxx.se/docs/adv_2018-b138.html
reference_id adv_2018-b138.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://curl.haxx.se/docs/adv_2018-b138.html
10
reference_url https://security.archlinux.org/ASA-201805-13
reference_id ASA-201805-13
reference_type
scores
url https://security.archlinux.org/ASA-201805-13
11
reference_url https://security.archlinux.org/ASA-201805-14
reference_id ASA-201805-14
reference_type
scores
url https://security.archlinux.org/ASA-201805-14
12
reference_url https://security.archlinux.org/ASA-201805-15
reference_id ASA-201805-15
reference_type
scores
url https://security.archlinux.org/ASA-201805-15
13
reference_url https://security.archlinux.org/ASA-201805-16
reference_id ASA-201805-16
reference_type
scores
url https://security.archlinux.org/ASA-201805-16
14
reference_url https://security.archlinux.org/ASA-201805-17
reference_id ASA-201805-17
reference_type
scores
url https://security.archlinux.org/ASA-201805-17
15
reference_url https://security.archlinux.org/ASA-201805-18
reference_id ASA-201805-18
reference_type
scores
url https://security.archlinux.org/ASA-201805-18
16
reference_url https://security.archlinux.org/AVG-694
reference_id AVG-694
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-694
17
reference_url https://security.archlinux.org/AVG-695
reference_id AVG-695
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-695
18
reference_url https://security.archlinux.org/AVG-696
reference_id AVG-696
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-696
19
reference_url https://security.archlinux.org/AVG-697
reference_id AVG-697
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-697
20
reference_url https://security.archlinux.org/AVG-698
reference_id AVG-698
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-698
21
reference_url https://security.archlinux.org/AVG-699
reference_id AVG-699
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-699
22
reference_url https://www.debian.org/security/2018/dsa-4202
reference_id dsa-4202
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://www.debian.org/security/2018/dsa-4202
23
reference_url https://security.gentoo.org/glsa/201806-05
reference_id GLSA-201806-05
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://security.gentoo.org/glsa/201806-05
24
reference_url https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html
fixed_packages
0
url pkg:generic/curl.se/curl@7.60.0
purl pkg:generic/curl.se/curl@7.60.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-738z-myg9-37hr
15
vulnerability VCID-7wqd-99h2-e7hk
16
vulnerability VCID-7yvu-s3p2-sfhc
17
vulnerability VCID-a58z-fu87-9ybs
18
vulnerability VCID-a8z6-bswu-jue8
19
vulnerability VCID-am31-t2h3-zbgw
20
vulnerability VCID-azcz-b8f2-63be
21
vulnerability VCID-bb6v-z8yg-6fe3
22
vulnerability VCID-bcuq-n4vb-k7f3
23
vulnerability VCID-bx2m-n5ft-3be8
24
vulnerability VCID-cdzf-3ydt-8bdk
25
vulnerability VCID-cfry-nx5h-kudv
26
vulnerability VCID-f7n8-zzhz-fuc8
27
vulnerability VCID-f9nm-d5ax-qkcb
28
vulnerability VCID-fcb7-8163-muf4
29
vulnerability VCID-fhc8-r8gv-bugj
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g7ux-4vz2-ckfg
32
vulnerability VCID-gud1-yg9u-zyfp
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-h6xj-mys4-pucf
35
vulnerability VCID-hhms-2hg6-nke9
36
vulnerability VCID-j688-cyfg-p7gu
37
vulnerability VCID-jnq1-hk6d-b3a3
38
vulnerability VCID-kkrm-dj79-4ucj
39
vulnerability VCID-kq38-7s5x-nqaz
40
vulnerability VCID-msd2-35g9-nyd2
41
vulnerability VCID-p7mn-a632-c3ag
42
vulnerability VCID-p97a-kjpp-f3d8
43
vulnerability VCID-q46r-7nct-s3bw
44
vulnerability VCID-q8tg-prj1-y7b8
45
vulnerability VCID-qrnc-7ywu-37cz
46
vulnerability VCID-r2g9-c896-rkge
47
vulnerability VCID-secz-78pt-dben
48
vulnerability VCID-sutv-qt2x-2yc7
49
vulnerability VCID-tcxd-z7f3-kkes
50
vulnerability VCID-td39-d3tf-vkhc
51
vulnerability VCID-ubnn-z97k-47gw
52
vulnerability VCID-uj78-2cgz-zbdb
53
vulnerability VCID-v82t-s9e1-2fbw
54
vulnerability VCID-vpkr-9akj-hbf6
55
vulnerability VCID-w472-84ep-fkdx
56
vulnerability VCID-w8ff-vxga-8qcz
57
vulnerability VCID-wbwx-5vg3-uqcd
58
vulnerability VCID-wmam-qmmg-6uay
59
vulnerability VCID-xgj8-zrta-kub9
60
vulnerability VCID-y41p-tgpa-m7cs
61
vulnerability VCID-y44u-23he-aya8
62
vulnerability VCID-yjtj-ydsg-u7ca
63
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.60.0
aliases CVE-2018-1000301
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6745-tyba-33fa
16
url VCID-738z-myg9-37hr
vulnerability_id VCID-738z-myg9-37hr
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
reference_id
reference_type
scores
0
value 0.00314
scoring_system epss
scoring_elements 0.54842
published_at 2026-06-04T12:55:00Z
1
value 0.00314
scoring_system epss
scoring_elements 0.54901
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
2
reference_url https://curl.se/docs/CVE-2022-27774.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27774.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1543773
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://hackerone.com/reports/1543773
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
reference_id 1010254
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
reference_id 2077547
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5m9y-9y57-kqg6
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6en5-etsd-2bce
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-f9nm-d5ax-qkcb
20
vulnerability VCID-fcb7-8163-muf4
21
vulnerability VCID-g4n9-kg3s-pfcr
22
vulnerability VCID-g7ux-4vz2-ckfg
23
vulnerability VCID-gueb-wzpx-ufb2
24
vulnerability VCID-h4nw-va5b-23ef
25
vulnerability VCID-hb4z-s871-d7ck
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-jnq1-hk6d-b3a3
28
vulnerability VCID-k5vr-1fmp-sqbw
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-mqzd-mcw5-s3h6
31
vulnerability VCID-mray-vkqx-5ka7
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-r2g9-c896-rkge
37
vulnerability VCID-razg-yr7y-ukgd
38
vulnerability VCID-secz-78pt-dben
39
vulnerability VCID-sutv-qt2x-2yc7
40
vulnerability VCID-tzs5-qzhn-rqbk
41
vulnerability VCID-u1p8-s8vm-3yer
42
vulnerability VCID-v82t-s9e1-2fbw
43
vulnerability VCID-vpkr-9akj-hbf6
44
vulnerability VCID-w472-84ep-fkdx
45
vulnerability VCID-w8ff-vxga-8qcz
46
vulnerability VCID-wbwx-5vg3-uqcd
47
vulnerability VCID-wgur-psum-pbck
48
vulnerability VCID-wmam-qmmg-6uay
49
vulnerability VCID-xgj8-zrta-kub9
50
vulnerability VCID-y41p-tgpa-m7cs
51
vulnerability VCID-y44u-23he-aya8
52
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27774
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-738z-myg9-37hr
17
url VCID-7wqd-99h2-e7hk
vulnerability_id VCID-7wqd-99h2-e7hk
summary When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14017.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14017.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-14017
reference_id
reference_type
scores
0
value 3e-05
scoring_system epss
scoring_elements 0.00081
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-14017
2
reference_url https://curl.se/docs/CVE-2025-14017.html
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-16T15:39:09Z/
url https://curl.se/docs/CVE-2025-14017.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14017
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14017
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2427870
reference_id 2427870
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2427870
6
reference_url https://curl.se/docs/CVE-2025-14017.json
reference_id CVE-2025-14017.json
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-16T15:39:09Z/
url https://curl.se/docs/CVE-2025-14017.json
7
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
8
reference_url https://usn.ubuntu.com/8062-1/
reference_id USN-8062-1
reference_type
scores
url https://usn.ubuntu.com/8062-1/
9
reference_url https://usn.ubuntu.com/8062-2/
reference_id USN-8062-2
reference_type
scores
url https://usn.ubuntu.com/8062-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.18.0
purl pkg:generic/curl.se/curl@8.18.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-39qh-jayw-g3dh
1
vulnerability VCID-5un8-xymy-37bt
2
vulnerability VCID-9vbs-w124-q3au
3
vulnerability VCID-bcuq-n4vb-k7f3
4
vulnerability VCID-f9nm-d5ax-qkcb
5
vulnerability VCID-fxgf-t3ue-6qhf
6
vulnerability VCID-g7ux-4vz2-ckfg
7
vulnerability VCID-hhms-2hg6-nke9
8
vulnerability VCID-secz-78pt-dben
9
vulnerability VCID-w8ff-vxga-8qcz
10
vulnerability VCID-wgur-psum-pbck
11
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.18.0
aliases CVE-2025-14017
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7wqd-99h2-e7hk
18
url VCID-7yvu-s3p2-sfhc
vulnerability_id VCID-7yvu-s3p2-sfhc
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22947.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22947.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22947
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48856
published_at 2026-06-04T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48918
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22947
2
reference_url https://curl.se/docs/CVE-2021-22947.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22947.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1334763
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://hackerone.com/reports/1334763
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2003191
reference_id 2003191
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2003191
21
reference_url http://seclists.org/fulldisclosure/2022/Mar/29
reference_id 29
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url http://seclists.org/fulldisclosure/2022/Mar/29
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
reference_id APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
23
reference_url https://security.archlinux.org/AVG-2384
reference_id AVG-2384
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2384
24
reference_url https://security.archlinux.org/AVG-2385
reference_id AVG-2385
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2385
25
reference_url https://security.archlinux.org/AVG-2386
reference_id AVG-2386
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2386
26
reference_url https://security.archlinux.org/AVG-2387
reference_id AVG-2387
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2387
27
reference_url https://security.archlinux.org/AVG-2388
reference_id AVG-2388
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2388
28
reference_url https://security.archlinux.org/AVG-2389
reference_id AVG-2389
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2389
29
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://www.debian.org/security/2022/dsa-5197
30
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://security.gentoo.org/glsa/202212-01
31
reference_url https://support.apple.com/kb/HT213183
reference_id HT213183
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://support.apple.com/kb/HT213183
32
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
33
reference_url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
34
reference_url https://security.netapp.com/advisory/ntap-20211029-0003/
reference_id ntap-20211029-0003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://security.netapp.com/advisory/ntap-20211029-0003/
35
reference_url https://access.redhat.com/errata/RHSA-2021:4059
reference_id RHSA-2021:4059
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4059
36
reference_url https://access.redhat.com/errata/RHSA-2022:0635
reference_id RHSA-2022:0635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0635
37
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
38
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
reference_id RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
39
reference_url https://usn.ubuntu.com/5079-1/
reference_id USN-5079-1
reference_type
scores
url https://usn.ubuntu.com/5079-1/
40
reference_url https://usn.ubuntu.com/5079-2/
reference_id USN-5079-2
reference_type
scores
url https://usn.ubuntu.com/5079-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.79.0
purl pkg:generic/curl.se/curl@7.79.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7z3h-9pk3-rqct
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-j688-cyfg-p7gu
26
vulnerability VCID-jnq1-hk6d-b3a3
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kkrm-dj79-4ucj
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-tzs5-qzhn-rqbk
39
vulnerability VCID-u1p8-s8vm-3yer
40
vulnerability VCID-urgp-rqyc-sqer
41
vulnerability VCID-v82t-s9e1-2fbw
42
vulnerability VCID-vpkr-9akj-hbf6
43
vulnerability VCID-w472-84ep-fkdx
44
vulnerability VCID-w8ff-vxga-8qcz
45
vulnerability VCID-wbwx-5vg3-uqcd
46
vulnerability VCID-wgur-psum-pbck
47
vulnerability VCID-wmam-qmmg-6uay
48
vulnerability VCID-xgj8-zrta-kub9
49
vulnerability VCID-y41p-tgpa-m7cs
50
vulnerability VCID-y44u-23he-aya8
51
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.79.0
aliases CVE-2021-22947
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7yvu-s3p2-sfhc
19
url VCID-a58z-fu87-9ybs
vulnerability_id VCID-a58z-fu87-9ybs
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
reference_id
reference_type
scores
0
value 0.00137
scoring_system epss
scoring_elements 0.33296
published_at 2026-06-04T12:55:00Z
1
value 0.00137
scoring_system epss
scoring_elements 0.33397
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
2
reference_url https://curl.se/docs/CVE-2021-22898.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://curl.se/docs/CVE-2021-22898.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1176461
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://hackerone.com/reports/1176461
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
reference_id 1964887
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
21
reference_url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_id 39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
22
reference_url http://www.openwall.com/lists/oss-security/2021/07/21/4
reference_id 4
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url http://www.openwall.com/lists/oss-security/2021/07/21/4
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
reference_id 989228
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
24
reference_url https://security.archlinux.org/ASA-202106-4
reference_id ASA-202106-4
reference_type
scores
url https://security.archlinux.org/ASA-202106-4
25
reference_url https://security.archlinux.org/ASA-202106-5
reference_id ASA-202106-5
reference_type
scores
url https://security.archlinux.org/ASA-202106-5
26
reference_url https://security.archlinux.org/ASA-202106-6
reference_id ASA-202106-6
reference_type
scores
url https://security.archlinux.org/ASA-202106-6
27
reference_url https://security.archlinux.org/ASA-202106-7
reference_id ASA-202106-7
reference_type
scores
url https://security.archlinux.org/ASA-202106-7
28
reference_url https://security.archlinux.org/ASA-202106-8
reference_id ASA-202106-8
reference_type
scores
url https://security.archlinux.org/ASA-202106-8
29
reference_url https://security.archlinux.org/ASA-202106-9
reference_id ASA-202106-9
reference_type
scores
url https://security.archlinux.org/ASA-202106-9
30
reference_url https://security.archlinux.org/AVG-1995
reference_id AVG-1995
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1995
31
reference_url https://security.archlinux.org/AVG-1996
reference_id AVG-1996
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1996
32
reference_url https://security.archlinux.org/AVG-1997
reference_id AVG-1997
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1997
33
reference_url https://security.archlinux.org/AVG-1998
reference_id AVG-1998
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1998
34
reference_url https://security.archlinux.org/AVG-1999
reference_id AVG-1999
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1999
35
reference_url https://security.archlinux.org/AVG-2000
reference_id AVG-2000
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2000
36
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://www.debian.org/security/2022/dsa-5197
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
38
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
url https://security.gentoo.org/glsa/202105-36
39
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
40
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
41
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
reference_id POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
42
reference_url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_id rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
43
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
44
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
45
reference_url https://usn.ubuntu.com/5021-2/
reference_id USN-5021-2
reference_type
scores
url https://usn.ubuntu.com/5021-2/
46
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.77.0
purl pkg:generic/curl.se/curl@7.77.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-287k-bzqy-n7ag
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3p2z-61gq-muhs
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-6ggz-pa5t-77c4
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-7yvu-s3p2-sfhc
15
vulnerability VCID-7z3h-9pk3-rqct
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bcuq-n4vb-k7f3
20
vulnerability VCID-bx2m-n5ft-3be8
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gueb-wzpx-ufb2
29
vulnerability VCID-h4nw-va5b-23ef
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-k5vr-1fmp-sqbw
34
vulnerability VCID-kkrm-dj79-4ucj
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-ns58-vmsz-5ued
37
vulnerability VCID-nwvb-d466-4uaa
38
vulnerability VCID-p155-gbtu-abg1
39
vulnerability VCID-p97a-kjpp-f3d8
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-razg-yr7y-ukgd
43
vulnerability VCID-secz-78pt-dben
44
vulnerability VCID-sutv-qt2x-2yc7
45
vulnerability VCID-td39-d3tf-vkhc
46
vulnerability VCID-tzs5-qzhn-rqbk
47
vulnerability VCID-u1p8-s8vm-3yer
48
vulnerability VCID-urgp-rqyc-sqer
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wgur-psum-pbck
55
vulnerability VCID-wmam-qmmg-6uay
56
vulnerability VCID-xgj8-zrta-kub9
57
vulnerability VCID-y41p-tgpa-m7cs
58
vulnerability VCID-y44u-23he-aya8
59
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.77.0
aliases CVE-2021-22898
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a58z-fu87-9ybs
20
url VCID-a8z6-bswu-jue8
vulnerability_id VCID-a8z6-bswu-jue8
summary A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28320.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28320.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28320
reference_id
reference_type
scores
0
value 0.00641
scoring_system epss
scoring_elements 0.7103
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28320
2
reference_url https://curl.se/docs/CVE-2023-28320.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28320.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28320
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1929597
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://hackerone.com/reports/1929597
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196783
reference_id 2196783
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196783
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://security.gentoo.org/glsa/202310-12
12
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213843
13
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213844
14
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://support.apple.com/kb/HT213845
15
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:57:47Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28320
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a8z6-bswu-jue8
21
url VCID-am31-t2h3-zbgw
vulnerability_id VCID-am31-t2h3-zbgw
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22925.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22925
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46284
published_at 2026-06-05T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.46217
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22925
2
reference_url https://curl.se/docs/CVE-2021-22925.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22925.html
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://hackerone.com/reports/1223882
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://hackerone.com/reports/1223882
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1970902
reference_id 1970902
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1970902
6
reference_url http://seclists.org/fulldisclosure/2021/Sep/39
reference_id 39
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url http://seclists.org/fulldisclosure/2021/Sep/39
7
reference_url http://seclists.org/fulldisclosure/2021/Sep/40
reference_id 40
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url http://seclists.org/fulldisclosure/2021/Sep/40
8
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
9
reference_url https://security.archlinux.org/ASA-202107-60
reference_id ASA-202107-60
reference_type
scores
url https://security.archlinux.org/ASA-202107-60
10
reference_url https://security.archlinux.org/ASA-202107-61
reference_id ASA-202107-61
reference_type
scores
url https://security.archlinux.org/ASA-202107-61
11
reference_url https://security.archlinux.org/ASA-202107-62
reference_id ASA-202107-62
reference_type
scores
url https://security.archlinux.org/ASA-202107-62
12
reference_url https://security.archlinux.org/ASA-202107-63
reference_id ASA-202107-63
reference_type
scores
url https://security.archlinux.org/ASA-202107-63
13
reference_url https://security.archlinux.org/ASA-202107-64
reference_id ASA-202107-64
reference_type
scores
url https://security.archlinux.org/ASA-202107-64
14
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
15
reference_url https://security.archlinux.org/AVG-2195
reference_id AVG-2195
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2195
16
reference_url https://security.archlinux.org/AVG-2196
reference_id AVG-2196
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2196
17
reference_url https://security.archlinux.org/AVG-2197
reference_id AVG-2197
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2197
18
reference_url https://security.archlinux.org/AVG-2198
reference_id AVG-2198
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2198
19
reference_url https://security.archlinux.org/AVG-2199
reference_id AVG-2199
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2199
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
21
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://security.gentoo.org/glsa/202212-01
22
reference_url https://support.apple.com/kb/HT212804
reference_id HT212804
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://support.apple.com/kb/HT212804
23
reference_url https://support.apple.com/kb/HT212805
reference_id HT212805
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://support.apple.com/kb/HT212805
24
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
25
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
26
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
reference_id ssa-484086.pdf
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T16:36:17Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
27
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
28
reference_url https://usn.ubuntu.com/5021-2/
reference_id USN-5021-2
reference_type
scores
url https://usn.ubuntu.com/5021-2/
29
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22925
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-am31-t2h3-zbgw
22
url VCID-azcz-b8f2-63be
vulnerability_id VCID-azcz-b8f2-63be
summary A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
reference_id
reference_type
scores
0
value 0.00179
scoring_system epss
scoring_elements 0.39261
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
2
reference_url https://curl.se/docs/CVE-2023-27533.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27533.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1891474
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://hackerone.com/reports/1891474
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
reference_id 2179062
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
8
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.gentoo.org/glsa/202310-12
9
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
10
reference_url https://security.netapp.com/advisory/ntap-20230420-0011/
reference_id ntap-20230420-0011
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.netapp.com/advisory/ntap-20230420-0011/
11
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
12
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
13
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
14
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
15
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27533
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-azcz-b8f2-63be
23
url VCID-bb6v-z8yg-6fe3
vulnerability_id VCID-bb6v-z8yg-6fe3
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3823
reference_id
reference_type
scores
0
value 0.01568
scoring_system epss
scoring_elements 0.81855
published_at 2026-06-04T12:55:00Z
1
value 0.01568
scoring_system epss
scoring_elements 0.81889
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3823
2
reference_url https://curl.se/docs/CVE-2019-3823.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-3823.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106950
reference_id 106950
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url http://www.securityfocus.com/bid/106950
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670256
reference_id 1670256
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670256
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2019-3823.html
reference_id CVE-2019-3823.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://curl.haxx.se/docs/CVE-2019-3823.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://security.gentoo.org/glsa/201903-03
24
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
25
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://access.redhat.com/errata/RHSA-2019:3701
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3823
reference_id show_bug.cgi?id=CVE-2019-3823
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3823
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-936080.pdf
reference_id ssa-936080.pdf
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-936080.pdf
fixed_packages
0
url pkg:generic/curl.se/curl@7.64.0
purl pkg:generic/curl.se/curl@7.64.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-58p5-pfy3-xug1
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-f7n8-zzhz-fuc8
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-fp66-fzqt-6yg7
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g7ux-4vz2-ckfg
30
vulnerability VCID-gud1-yg9u-zyfp
31
vulnerability VCID-gueb-wzpx-ufb2
32
vulnerability VCID-h6xj-mys4-pucf
33
vulnerability VCID-hhms-2hg6-nke9
34
vulnerability VCID-j688-cyfg-p7gu
35
vulnerability VCID-jnq1-hk6d-b3a3
36
vulnerability VCID-kkrm-dj79-4ucj
37
vulnerability VCID-kn6z-caj8-bbc9
38
vulnerability VCID-kq38-7s5x-nqaz
39
vulnerability VCID-msd2-35g9-nyd2
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-r2g9-c896-rkge
44
vulnerability VCID-secz-78pt-dben
45
vulnerability VCID-sutv-qt2x-2yc7
46
vulnerability VCID-tcxd-z7f3-kkes
47
vulnerability VCID-td39-d3tf-vkhc
48
vulnerability VCID-uj78-2cgz-zbdb
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wmam-qmmg-6uay
55
vulnerability VCID-xc5k-47n9-43d6
56
vulnerability VCID-xgj8-zrta-kub9
57
vulnerability VCID-y41p-tgpa-m7cs
58
vulnerability VCID-y44u-23he-aya8
59
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.64.0
aliases CVE-2019-3823
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bb6v-z8yg-6fe3
24
url VCID-bcuq-n4vb-k7f3
vulnerability_id VCID-bcuq-n4vb-k7f3
summary curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-7168.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-7168.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-7168
reference_id
reference_type
scores
0
value 0.00079
scoring_system epss
scoring_elements 0.23476
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-7168
2
reference_url https://curl.se/docs/CVE-2026-7168.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2026-7168.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7168
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7168
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3697719
reference_id
reference_type
scores
url https://hackerone.com/reports/3697719
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2476979
reference_id 2476979
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2476979
7
reference_url https://access.redhat.com/errata/RHSA-2026:19106
reference_id RHSA-2026:19106
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:19106
8
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-7168
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bcuq-n4vb-k7f3
25
url VCID-bx2m-n5ft-3be8
vulnerability_id VCID-bx2m-n5ft-3be8
summary 
Improper Authentication
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.11244
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
2
reference_url https://curl.se/docs/CVE-2023-27535.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27535.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1892780
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://hackerone.com/reports/1892780
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
reference_id 2179073
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
reference_id CVE-2023-27535
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
12
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
13
reference_url https://access.redhat.com/errata/RHSA-2023:2650
reference_id RHSA-2023:2650
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2650
14
reference_url https://access.redhat.com/errata/RHSA-2023:3106
reference_id RHSA-2023:3106
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3106
15
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
16
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
17
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27535
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bx2m-n5ft-3be8
26
url VCID-cdzf-3ydt-8bdk
vulnerability_id VCID-cdzf-3ydt-8bdk
summary When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
reference_id
reference_type
scores
0
value 0.01853
scoring_system epss
scoring_elements 0.83366
published_at 2026-06-04T12:55:00Z
1
value 0.01853
scoring_system epss
scoring_elements 0.8339
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
2
reference_url https://curl.se/docs/CVE-2022-32221.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32221.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/1704017
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://hackerone.com/reports/1704017
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/19
reference_id 19
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/19
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
reference_id 2135411
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
10
reference_url http://www.openwall.com/lists/oss-security/2023/05/17/4
reference_id 4
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://www.openwall.com/lists/oss-security/2023/05/17/4
11
reference_url https://www.debian.org/security/2023/dsa-5330
reference_id dsa-5330
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://www.debian.org/security/2023/dsa-5330
12
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.gentoo.org/glsa/202212-01
13
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213604
14
reference_url https://support.apple.com/kb/HT213605
reference_id HT213605
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213605
15
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
16
reference_url https://security.netapp.com/advisory/ntap-20230110-0006/
reference_id ntap-20230110-0006
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230110-0006/
17
reference_url https://security.netapp.com/advisory/ntap-20230208-0002/
reference_id ntap-20230208-0002
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230208-0002/
18
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
19
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
20
reference_url https://access.redhat.com/errata/RHSA-2023:0333
reference_id RHSA-2023:0333
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0333
21
reference_url https://access.redhat.com/errata/RHSA-2023:4139
reference_id RHSA-2023:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4139
22
reference_url https://usn.ubuntu.com/5702-1/
reference_id USN-5702-1
reference_type
scores
url https://usn.ubuntu.com/5702-1/
23
reference_url https://usn.ubuntu.com/5702-2/
reference_id USN-5702-2
reference_type
scores
url https://usn.ubuntu.com/5702-2/
24
reference_url https://usn.ubuntu.com/5823-1/
reference_id USN-5823-1
reference_type
scores
url https://usn.ubuntu.com/5823-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.86.0
purl pkg:generic/curl.se/curl@7.86.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-287k-bzqy-n7ag
4
vulnerability VCID-39qh-jayw-g3dh
5
vulnerability VCID-3p2z-61gq-muhs
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6en5-etsd-2bce
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-7wqd-99h2-e7hk
10
vulnerability VCID-85qb-zec7-subc
11
vulnerability VCID-a8z6-bswu-jue8
12
vulnerability VCID-azcz-b8f2-63be
13
vulnerability VCID-bcuq-n4vb-k7f3
14
vulnerability VCID-bx2m-n5ft-3be8
15
vulnerability VCID-cfry-nx5h-kudv
16
vulnerability VCID-f9nm-d5ax-qkcb
17
vulnerability VCID-fcb7-8163-muf4
18
vulnerability VCID-ffmg-djmk-57hn
19
vulnerability VCID-g4n9-kg3s-pfcr
20
vulnerability VCID-g7ux-4vz2-ckfg
21
vulnerability VCID-gueb-wzpx-ufb2
22
vulnerability VCID-hhms-2hg6-nke9
23
vulnerability VCID-jnq1-hk6d-b3a3
24
vulnerability VCID-k3nv-gf9b-5ua2
25
vulnerability VCID-kq38-7s5x-nqaz
26
vulnerability VCID-ns58-vmsz-5ued
27
vulnerability VCID-nwvb-d466-4uaa
28
vulnerability VCID-p155-gbtu-abg1
29
vulnerability VCID-p97a-kjpp-f3d8
30
vulnerability VCID-r2g9-c896-rkge
31
vulnerability VCID-razg-yr7y-ukgd
32
vulnerability VCID-secz-78pt-dben
33
vulnerability VCID-sutv-qt2x-2yc7
34
vulnerability VCID-u1p8-s8vm-3yer
35
vulnerability VCID-v82t-s9e1-2fbw
36
vulnerability VCID-w472-84ep-fkdx
37
vulnerability VCID-w8ff-vxga-8qcz
38
vulnerability VCID-wgur-psum-pbck
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-y41p-tgpa-m7cs
41
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.86.0
aliases CVE-2022-32221
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdzf-3ydt-8bdk
27
url VCID-cfry-nx5h-kudv
vulnerability_id VCID-cfry-nx5h-kudv
summary An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decompression chain" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a "malloc bomb", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23916.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23916.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23916
reference_id
reference_type
scores
0
value 0.00066
scoring_system epss
scoring_elements 0.20718
published_at 2026-06-04T12:55:00Z
1
value 0.00066
scoring_system epss
scoring_elements 0.20793
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23916
2
reference_url https://curl.se/docs/CVE-2023-23916.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-23916.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1826048
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://hackerone.com/reports/1826048
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031371
reference_id 1031371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031371
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2167815
reference_id 2167815
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2167815
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
reference_id BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
9
reference_url https://www.debian.org/security/2023/dsa-5365
reference_id dsa-5365
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://www.debian.org/security/2023/dsa-5365
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
12
reference_url https://security.netapp.com/advisory/ntap-20230309-0006/
reference_id ntap-20230309-0006
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://security.netapp.com/advisory/ntap-20230309-0006/
13
reference_url https://access.redhat.com/errata/RHSA-2023:1140
reference_id RHSA-2023:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1140
14
reference_url https://access.redhat.com/errata/RHSA-2023:1701
reference_id RHSA-2023:1701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1701
15
reference_url https://access.redhat.com/errata/RHSA-2023:1842
reference_id RHSA-2023:1842
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1842
16
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
17
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
18
reference_url https://access.redhat.com/errata/RHSA-2023:3460
reference_id RHSA-2023:3460
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3460
19
reference_url https://access.redhat.com/errata/RHSA-2023:4139
reference_id RHSA-2023:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4139
20
reference_url https://usn.ubuntu.com/5891-1/
reference_id USN-5891-1
reference_type
scores
url https://usn.ubuntu.com/5891-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.88.0
purl pkg:generic/curl.se/curl@7.88.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-39qh-jayw-g3dh
4
vulnerability VCID-3p2z-61gq-muhs
5
vulnerability VCID-5un8-xymy-37bt
6
vulnerability VCID-6en5-etsd-2bce
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-azcz-b8f2-63be
12
vulnerability VCID-bcuq-n4vb-k7f3
13
vulnerability VCID-bx2m-n5ft-3be8
14
vulnerability VCID-f9nm-d5ax-qkcb
15
vulnerability VCID-fcb7-8163-muf4
16
vulnerability VCID-ffmg-djmk-57hn
17
vulnerability VCID-g4n9-kg3s-pfcr
18
vulnerability VCID-g7ux-4vz2-ckfg
19
vulnerability VCID-gueb-wzpx-ufb2
20
vulnerability VCID-gux4-dncg-h7a6
21
vulnerability VCID-hhms-2hg6-nke9
22
vulnerability VCID-jnq1-hk6d-b3a3
23
vulnerability VCID-k3nv-gf9b-5ua2
24
vulnerability VCID-kq38-7s5x-nqaz
25
vulnerability VCID-kvmd-97y1-tbcz
26
vulnerability VCID-p155-gbtu-abg1
27
vulnerability VCID-p97a-kjpp-f3d8
28
vulnerability VCID-razg-yr7y-ukgd
29
vulnerability VCID-secz-78pt-dben
30
vulnerability VCID-sutv-qt2x-2yc7
31
vulnerability VCID-u1p8-s8vm-3yer
32
vulnerability VCID-v82t-s9e1-2fbw
33
vulnerability VCID-w472-84ep-fkdx
34
vulnerability VCID-w8ff-vxga-8qcz
35
vulnerability VCID-wgur-psum-pbck
36
vulnerability VCID-wmam-qmmg-6uay
37
vulnerability VCID-y41p-tgpa-m7cs
38
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.88.0
aliases CVE-2023-23916
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cfry-nx5h-kudv
28
url VCID-f7n8-zzhz-fuc8
vulnerability_id VCID-f7n8-zzhz-fuc8
summary 
Improper Certificate Validation
curl is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8286.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8286.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8286
reference_id
reference_type
scores
0
value 0.00286
scoring_system epss
scoring_elements 0.52393
published_at 2026-06-05T12:55:00Z
1
value 0.00286
scoring_system epss
scoring_elements 0.52333
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8286
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1048457
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://hackerone.com/reports/1048457
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1906096
reference_id 1906096
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1906096
13
reference_url http://seclists.org/fulldisclosure/2021/Apr/50
reference_id 50
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/50
14
reference_url http://seclists.org/fulldisclosure/2021/Apr/51
reference_id 51
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/51
15
reference_url http://seclists.org/fulldisclosure/2021/Apr/54
reference_id 54
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/54
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977161
reference_id 977161
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977161
17
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8286
reference_id CVE-2020-8286
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8286
19
reference_url https://curl.se/docs/CVE-2020-8286.html
reference_id CVE-2020-8286.HTML
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://curl.se/docs/CVE-2020-8286.html
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
21
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://www.debian.org/security/2021/dsa-4881
22
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://security.gentoo.org/glsa/202012-14
23
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212325
24
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212326
25
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212327
26
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
27
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
28
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
29
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
30
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
31
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
32
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
reference_id ssa-200951.pdf
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
33
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.74.0
purl pkg:generic/curl.se/curl@7.74.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-738z-myg9-37hr
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7yvu-s3p2-sfhc
13
vulnerability VCID-7z3h-9pk3-rqct
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kn6z-caj8-bbc9
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-p155-gbtu-abg1
37
vulnerability VCID-p97a-kjpp-f3d8
38
vulnerability VCID-q8tg-prj1-y7b8
39
vulnerability VCID-r2g9-c896-rkge
40
vulnerability VCID-razg-yr7y-ukgd
41
vulnerability VCID-secz-78pt-dben
42
vulnerability VCID-sutv-qt2x-2yc7
43
vulnerability VCID-td39-d3tf-vkhc
44
vulnerability VCID-tzs5-qzhn-rqbk
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wgur-psum-pbck
52
vulnerability VCID-wmam-qmmg-6uay
53
vulnerability VCID-xgj8-zrta-kub9
54
vulnerability VCID-y41p-tgpa-m7cs
55
vulnerability VCID-y44u-23he-aya8
56
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0
aliases CVE-2020-8286
risk_score 3.4
exploitability 0.5
weighted_severity 6.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f7n8-zzhz-fuc8
29
url VCID-f9nm-d5ax-qkcb
vulnerability_id VCID-f9nm-d5ax-qkcb
summary curl: libcurl: Credential leak via reused proxy connection during HTTP redirects
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6429.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6429.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-6429
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.06052
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-6429
2
reference_url https://curl.se/docs/CVE-2026-6429.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T14:03:52Z/
url https://curl.se/docs/CVE-2026-6429.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6429
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6429
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3677759
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T14:03:52Z/
url https://hackerone.com/reports/3677759
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461205
reference_id 2461205
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461205
7
reference_url https://curl.se/docs/CVE-2026-6429.json
reference_id CVE-2026-6429.json
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T14:03:52Z/
url https://curl.se/docs/CVE-2026-6429.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-6429
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f9nm-d5ax-qkcb
30
url VCID-fhc8-r8gv-bugj
vulnerability_id VCID-fhc8-r8gv-bugj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
reference_id
reference_type
scores
0
value 0.00115
scoring_system epss
scoring_elements 0.29867
published_at 2026-06-05T12:55:00Z
1
value 0.00115
scoring_system epss
scoring_elements 0.29799
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1101882
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://hackerone.com/reports/1101882
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
reference_id 1941964
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
reference_id 2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
reference_id 986269
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
15
reference_url https://security.archlinux.org/AVG-1753
reference_id AVG-1753
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1753
16
reference_url https://security.archlinux.org/AVG-1754
reference_id AVG-1754
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1754
17
reference_url https://security.archlinux.org/AVG-1755
reference_id AVG-1755
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1755
18
reference_url https://security.archlinux.org/AVG-1756
reference_id AVG-1756
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1756
19
reference_url https://security.archlinux.org/AVG-1757
reference_id AVG-1757
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1757
20
reference_url https://security.archlinux.org/AVG-1758
reference_id AVG-1758
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1758
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
reference_id CVE-2021-22876
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
22
reference_url https://curl.se/docs/CVE-2021-22876.html
reference_id CVE-2021-22876.HTML
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://curl.se/docs/CVE-2021-22876.html
23
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.gentoo.org/glsa/202105-36
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
reference_id ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
reference_id KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
26
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
reference_id msg00019.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
27
reference_url https://security.netapp.com/advisory/ntap-20210521-0007/
reference_id ntap-20210521-0007
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.netapp.com/advisory/ntap-20210521-0007/
28
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
29
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
30
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
31
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
32
reference_url https://usn.ubuntu.com/4898-1/
reference_id USN-4898-1
reference_type
scores
url https://usn.ubuntu.com/4898-1/
33
reference_url https://usn.ubuntu.com/4903-1/
reference_id USN-4903-1
reference_type
scores
url https://usn.ubuntu.com/4903-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.76.0
purl pkg:generic/curl.se/curl@7.76.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-3p2z-61gq-muhs
9
vulnerability VCID-5un8-xymy-37bt
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-7z3h-9pk3-rqct
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bcuq-n4vb-k7f3
20
vulnerability VCID-bx2m-n5ft-3be8
21
vulnerability VCID-byzw-xw9s-pkga
22
vulnerability VCID-cdzf-3ydt-8bdk
23
vulnerability VCID-cfry-nx5h-kudv
24
vulnerability VCID-cjyz-fdnv-b3g4
25
vulnerability VCID-f9nm-d5ax-qkcb
26
vulnerability VCID-fcb7-8163-muf4
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-p155-gbtu-abg1
36
vulnerability VCID-p97a-kjpp-f3d8
37
vulnerability VCID-q8tg-prj1-y7b8
38
vulnerability VCID-r2g9-c896-rkge
39
vulnerability VCID-razg-yr7y-ukgd
40
vulnerability VCID-secz-78pt-dben
41
vulnerability VCID-sutv-qt2x-2yc7
42
vulnerability VCID-td39-d3tf-vkhc
43
vulnerability VCID-tzs5-qzhn-rqbk
44
vulnerability VCID-u1p8-s8vm-3yer
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vgap-k5zw-9qbn
48
vulnerability VCID-vpkr-9akj-hbf6
49
vulnerability VCID-w472-84ep-fkdx
50
vulnerability VCID-w8ff-vxga-8qcz
51
vulnerability VCID-wbwx-5vg3-uqcd
52
vulnerability VCID-wgur-psum-pbck
53
vulnerability VCID-wmam-qmmg-6uay
54
vulnerability VCID-xgj8-zrta-kub9
55
vulnerability VCID-y41p-tgpa-m7cs
56
vulnerability VCID-y44u-23he-aya8
57
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.76.0
aliases CVE-2021-22876
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhc8-r8gv-bugj
31
url VCID-g4n9-kg3s-pfcr
vulnerability_id VCID-g4n9-kg3s-pfcr
summary An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
reference_id
reference_type
scores
0
value 0.00297
scoring_system epss
scoring_elements 0.5335
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
2
reference_url https://curl.se/docs/CVE-2023-28321.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28321.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1950627
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://hackerone.com/reports/1950627
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
reference_id 2196786
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
reference_id msg00016.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4523
reference_id RHSA-2023:4523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4523
20
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
21
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
22
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
23
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
24
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
25
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
26
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28321
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g4n9-kg3s-pfcr
32
url VCID-g7ux-4vz2-ckfg
vulnerability_id VCID-g7ux-4vz2-ckfg
summary curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5545.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5545.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-5545
reference_id
reference_type
scores
0
value 0.00037
scoring_system epss
scoring_elements 0.11302
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-5545
2
reference_url https://curl.se/docs/CVE-2026-5545.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://curl.se/docs/CVE-2026-5545.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3642555
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://hackerone.com/reports/3642555
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461204
reference_id 2461204
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461204
7
reference_url https://curl.se/docs/CVE-2026-5545.json
reference_id CVE-2026-5545.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:46:36Z/
url https://curl.se/docs/CVE-2026-5545.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-5545
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g7ux-4vz2-ckfg
33
url VCID-gud1-yg9u-zyfp
vulnerability_id VCID-gud1-yg9u-zyfp
summary 
Use After Free
Due to use of a dangling pointer, libcurl can use the wrong connection when sending data.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8231
reference_id
reference_type
scores
0
value 0.00159
scoring_system epss
scoring_elements 0.36534
published_at 2026-06-04T12:55:00Z
1
value 0.00159
scoring_system epss
scoring_elements 0.36628
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8231
2
reference_url https://curl.se/docs/CVE-2020-8231.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2020-8231.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/948876
reference_id
reference_type
scores
url https://hackerone.com/reports/948876
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1868032
reference_id 1868032
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1868032
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968831
reference_id 968831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968831
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8231
reference_id CVE-2020-8231
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8231
16
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
url https://security.gentoo.org/glsa/202012-14
17
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
18
reference_url https://usn.ubuntu.com/4466-1/
reference_id USN-4466-1
reference_type
scores
url https://usn.ubuntu.com/4466-1/
19
reference_url https://usn.ubuntu.com/4466-2/
reference_id USN-4466-2
reference_type
scores
url https://usn.ubuntu.com/4466-2/
20
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.72.0
purl pkg:generic/curl.se/curl@7.72.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-a8z6-bswu-jue8
15
vulnerability VCID-am31-t2h3-zbgw
16
vulnerability VCID-azcz-b8f2-63be
17
vulnerability VCID-bcuq-n4vb-k7f3
18
vulnerability VCID-bx2m-n5ft-3be8
19
vulnerability VCID-byzw-xw9s-pkga
20
vulnerability VCID-cdzf-3ydt-8bdk
21
vulnerability VCID-cfry-nx5h-kudv
22
vulnerability VCID-f7n8-zzhz-fuc8
23
vulnerability VCID-f9nm-d5ax-qkcb
24
vulnerability VCID-fcb7-8163-muf4
25
vulnerability VCID-fhc8-r8gv-bugj
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gueb-wzpx-ufb2
29
vulnerability VCID-hhms-2hg6-nke9
30
vulnerability VCID-j688-cyfg-p7gu
31
vulnerability VCID-jnq1-hk6d-b3a3
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-msd2-35g9-nyd2
36
vulnerability VCID-p155-gbtu-abg1
37
vulnerability VCID-p97a-kjpp-f3d8
38
vulnerability VCID-q46r-7nct-s3bw
39
vulnerability VCID-q8tg-prj1-y7b8
40
vulnerability VCID-r2g9-c896-rkge
41
vulnerability VCID-razg-yr7y-ukgd
42
vulnerability VCID-secz-78pt-dben
43
vulnerability VCID-sutv-qt2x-2yc7
44
vulnerability VCID-td39-d3tf-vkhc
45
vulnerability VCID-tzs5-qzhn-rqbk
46
vulnerability VCID-urgp-rqyc-sqer
47
vulnerability VCID-v82t-s9e1-2fbw
48
vulnerability VCID-vpkr-9akj-hbf6
49
vulnerability VCID-w472-84ep-fkdx
50
vulnerability VCID-w8ff-vxga-8qcz
51
vulnerability VCID-wbwx-5vg3-uqcd
52
vulnerability VCID-wgur-psum-pbck
53
vulnerability VCID-wmam-qmmg-6uay
54
vulnerability VCID-xgj8-zrta-kub9
55
vulnerability VCID-y41p-tgpa-m7cs
56
vulnerability VCID-y44u-23he-aya8
57
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.72.0
aliases CVE-2020-8231
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gud1-yg9u-zyfp
34
url VCID-gueb-wzpx-ufb2
vulnerability_id VCID-gueb-wzpx-ufb2
summary 
Improper Authentication
An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27538.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27538.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27538
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01683
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27538
2
reference_url https://curl.se/docs/CVE-2023-27538.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27538.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1898475
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://hackerone.com/reports/1898475
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179103
reference_id 2179103
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179103
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27538
reference_id CVE-2023-27538
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27538
9
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://security.gentoo.org/glsa/202310-12
10
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
11
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
12
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
13
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27538
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gueb-wzpx-ufb2
35
url VCID-h6xj-mys4-pucf
vulnerability_id VCID-h6xj-mys4-pucf
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8177
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05265
published_at 2026-06-05T12:55:00Z
1
value 0.00019
scoring_system epss
scoring_elements 0.05244
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8177
2
reference_url https://curl.se/docs/CVE-2020-8177.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://curl.se/docs/CVE-2020-8177.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/887462
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://hackerone.com/reports/887462
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1847915
reference_id 1847915
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1847915
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965281
reference_id 965281
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965281
15
reference_url https://security.archlinux.org/AVG-1194
reference_id AVG-1194
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1194
16
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://www.debian.org/security/2021/dsa-4881
17
reference_url https://security.gentoo.org/glsa/202007-16
reference_id GLSA-202007-16
reference_type
scores
url https://security.gentoo.org/glsa/202007-16
18
reference_url https://access.redhat.com/errata/RHSA-2020:4599
reference_id RHSA-2020:4599
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4599
19
reference_url https://access.redhat.com/errata/RHSA-2020:5002
reference_id RHSA-2020:5002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5002
20
reference_url https://access.redhat.com/errata/RHSA-2020:5417
reference_id RHSA-2020:5417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5417
21
reference_url https://access.redhat.com/errata/RHSA-2021:0949
reference_id RHSA-2021:0949
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0949
22
reference_url https://usn.ubuntu.com/4402-1/
reference_id USN-4402-1
reference_type
scores
url https://usn.ubuntu.com/4402-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.71.0
purl pkg:generic/curl.se/curl@7.71.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-a8z6-bswu-jue8
15
vulnerability VCID-am31-t2h3-zbgw
16
vulnerability VCID-azcz-b8f2-63be
17
vulnerability VCID-bcuq-n4vb-k7f3
18
vulnerability VCID-bx2m-n5ft-3be8
19
vulnerability VCID-byzw-xw9s-pkga
20
vulnerability VCID-cdzf-3ydt-8bdk
21
vulnerability VCID-cfry-nx5h-kudv
22
vulnerability VCID-f7n8-zzhz-fuc8
23
vulnerability VCID-f9nm-d5ax-qkcb
24
vulnerability VCID-fcb7-8163-muf4
25
vulnerability VCID-fhc8-r8gv-bugj
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gud1-yg9u-zyfp
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kn6z-caj8-bbc9
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-p155-gbtu-abg1
38
vulnerability VCID-p97a-kjpp-f3d8
39
vulnerability VCID-q46r-7nct-s3bw
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-razg-yr7y-ukgd
43
vulnerability VCID-secz-78pt-dben
44
vulnerability VCID-sutv-qt2x-2yc7
45
vulnerability VCID-td39-d3tf-vkhc
46
vulnerability VCID-tzs5-qzhn-rqbk
47
vulnerability VCID-urgp-rqyc-sqer
48
vulnerability VCID-v82t-s9e1-2fbw
49
vulnerability VCID-vpkr-9akj-hbf6
50
vulnerability VCID-w472-84ep-fkdx
51
vulnerability VCID-w8ff-vxga-8qcz
52
vulnerability VCID-wbwx-5vg3-uqcd
53
vulnerability VCID-wgur-psum-pbck
54
vulnerability VCID-wmam-qmmg-6uay
55
vulnerability VCID-xgj8-zrta-kub9
56
vulnerability VCID-y41p-tgpa-m7cs
57
vulnerability VCID-y44u-23he-aya8
58
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.71.0
aliases CVE-2020-8177
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h6xj-mys4-pucf
36
url VCID-hhms-2hg6-nke9
vulnerability_id VCID-hhms-2hg6-nke9
summary curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3783.json
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3783.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-3783
reference_id
reference_type
scores
0
value 0.00028
scoring_system epss
scoring_elements 0.08557
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-3783
2
reference_url https://curl.se/docs/CVE-2026-3783.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:25:28Z/
url https://curl.se/docs/CVE-2026-3783.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3583983
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:25:28Z/
url https://hackerone.com/reports/3583983
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2446450
reference_id 2446450
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2446450
7
reference_url https://curl.se/docs/CVE-2026-3783.json
reference_id CVE-2026-3783.json
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T14:25:28Z/
url https://curl.se/docs/CVE-2026-3783.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
9
reference_url https://usn.ubuntu.com/8084-1/
reference_id USN-8084-1
reference_type
scores
url https://usn.ubuntu.com/8084-1/
10
reference_url https://usn.ubuntu.com/8099-1/
reference_id USN-8099-1
reference_type
scores
url https://usn.ubuntu.com/8099-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.19.0
purl pkg:generic/curl.se/curl@8.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5un8-xymy-37bt
1
vulnerability VCID-9vbs-w124-q3au
2
vulnerability VCID-bcuq-n4vb-k7f3
3
vulnerability VCID-f9nm-d5ax-qkcb
4
vulnerability VCID-g7ux-4vz2-ckfg
5
vulnerability VCID-secz-78pt-dben
6
vulnerability VCID-w8ff-vxga-8qcz
7
vulnerability VCID-wgur-psum-pbck
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0
aliases CVE-2026-3783
risk_score 2.5
exploitability 0.5
weighted_severity 5.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhms-2hg6-nke9
37
url VCID-j688-cyfg-p7gu
vulnerability_id VCID-j688-cyfg-p7gu
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22576
reference_id
reference_type
scores
0
value 0.00348
scoring_system epss
scoring_elements 0.57608
published_at 2026-06-04T12:55:00Z
1
value 0.00348
scoring_system epss
scoring_elements 0.5766
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22576
2
reference_url https://curl.se/docs/CVE-2022-22576.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-22576.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1526328
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://hackerone.com/reports/1526328
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010295
reference_id 1010295
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010295
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2077541
reference_id 2077541
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2077541
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5m9y-9y57-kqg6
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6en5-etsd-2bce
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-f9nm-d5ax-qkcb
20
vulnerability VCID-fcb7-8163-muf4
21
vulnerability VCID-g4n9-kg3s-pfcr
22
vulnerability VCID-g7ux-4vz2-ckfg
23
vulnerability VCID-gueb-wzpx-ufb2
24
vulnerability VCID-h4nw-va5b-23ef
25
vulnerability VCID-hb4z-s871-d7ck
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-jnq1-hk6d-b3a3
28
vulnerability VCID-k5vr-1fmp-sqbw
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-mqzd-mcw5-s3h6
31
vulnerability VCID-mray-vkqx-5ka7
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-r2g9-c896-rkge
37
vulnerability VCID-razg-yr7y-ukgd
38
vulnerability VCID-secz-78pt-dben
39
vulnerability VCID-sutv-qt2x-2yc7
40
vulnerability VCID-tzs5-qzhn-rqbk
41
vulnerability VCID-u1p8-s8vm-3yer
42
vulnerability VCID-v82t-s9e1-2fbw
43
vulnerability VCID-vpkr-9akj-hbf6
44
vulnerability VCID-w472-84ep-fkdx
45
vulnerability VCID-w8ff-vxga-8qcz
46
vulnerability VCID-wbwx-5vg3-uqcd
47
vulnerability VCID-wgur-psum-pbck
48
vulnerability VCID-wmam-qmmg-6uay
49
vulnerability VCID-xgj8-zrta-kub9
50
vulnerability VCID-y41p-tgpa-m7cs
51
vulnerability VCID-y44u-23he-aya8
52
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-22576
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j688-cyfg-p7gu
38
url VCID-jnq1-hk6d-b3a3
vulnerability_id VCID-jnq1-hk6d-b3a3
summary When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2398.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2398.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-2398
reference_id
reference_type
scores
0
value 0.02015
scoring_system epss
scoring_elements 0.84075
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-2398
2
reference_url https://curl.se/docs/CVE-2024-2398.html
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://curl.se/docs/CVE-2024-2398.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2402845
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://hackerone.com/reports/2402845
6
reference_url http://seclists.org/fulldisclosure/2024/Jul/18
reference_id 18
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/18
7
reference_url http://seclists.org/fulldisclosure/2024/Jul/19
reference_id 19
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/19
8
reference_url http://seclists.org/fulldisclosure/2024/Jul/20
reference_id 20
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/20
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2270498
reference_id 2270498
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2270498
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
reference_id 2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
11
reference_url http://www.openwall.com/lists/oss-security/2024/03/27/3
reference_id 3
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://www.openwall.com/lists/oss-security/2024/03/27/3
12
reference_url https://curl.se/docs/CVE-2024-2398.json
reference_id CVE-2024-2398.json
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://curl.se/docs/CVE-2024-2398.json
13
reference_url https://security.gentoo.org/glsa/202409-20
reference_id GLSA-202409-20
reference_type
scores
url https://security.gentoo.org/glsa/202409-20
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
reference_id GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
15
reference_url https://support.apple.com/kb/HT214118
reference_id HT214118
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214118
16
reference_url https://support.apple.com/kb/HT214119
reference_id HT214119
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214119
17
reference_url https://support.apple.com/kb/HT214120
reference_id HT214120
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214120
18
reference_url https://security.netapp.com/advisory/ntap-20240503-0009/
reference_id ntap-20240503-0009
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://security.netapp.com/advisory/ntap-20240503-0009/
19
reference_url https://access.redhat.com/errata/RHSA-2024:10135
reference_id RHSA-2024:10135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10135
20
reference_url https://access.redhat.com/errata/RHSA-2024:11109
reference_id RHSA-2024:11109
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:11109
21
reference_url https://access.redhat.com/errata/RHSA-2024:2693
reference_id RHSA-2024:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2693
22
reference_url https://access.redhat.com/errata/RHSA-2024:2694
reference_id RHSA-2024:2694
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2694
23
reference_url https://access.redhat.com/errata/RHSA-2024:3998
reference_id RHSA-2024:3998
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3998
24
reference_url https://access.redhat.com/errata/RHSA-2024:5529
reference_id RHSA-2024:5529
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5529
25
reference_url https://access.redhat.com/errata/RHSA-2024:5654
reference_id RHSA-2024:5654
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5654
26
reference_url https://access.redhat.com/errata/RHSA-2024:7213
reference_id RHSA-2024:7213
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7213
27
reference_url https://access.redhat.com/errata/RHSA-2024:7374
reference_id RHSA-2024:7374
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7374
28
reference_url https://usn.ubuntu.com/6718-1/
reference_id USN-6718-1
reference_type
scores
url https://usn.ubuntu.com/6718-1/
29
reference_url https://usn.ubuntu.com/6718-2/
reference_id USN-6718-2
reference_type
scores
url https://usn.ubuntu.com/6718-2/
30
reference_url https://usn.ubuntu.com/6718-3/
reference_id USN-6718-3
reference_type
scores
url https://usn.ubuntu.com/6718-3/
fixed_packages
0
url pkg:generic/curl.se/curl@8.7.0
purl pkg:generic/curl.se/curl@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85ne-e7gm-5ua9
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-bp56-gy66-mqae
10
vulnerability VCID-f9nm-d5ax-qkcb
11
vulnerability VCID-fcb7-8163-muf4
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-kq38-7s5x-nqaz
16
vulnerability VCID-p155-gbtu-abg1
17
vulnerability VCID-secz-78pt-dben
18
vulnerability VCID-u1p8-s8vm-3yer
19
vulnerability VCID-v82t-s9e1-2fbw
20
vulnerability VCID-w8ff-vxga-8qcz
21
vulnerability VCID-wgur-psum-pbck
22
vulnerability VCID-y41p-tgpa-m7cs
23
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.7.0
aliases CVE-2024-2398
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jnq1-hk6d-b3a3
39
url VCID-kae8-wmf2-2kf1
vulnerability_id VCID-kae8-wmf2-2kf1
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000300
reference_id
reference_type
scores
0
value 0.00926
scoring_system epss
scoring_elements 0.76446
published_at 2026-06-05T12:55:00Z
1
value 0.00926
scoring_system epss
scoring_elements 0.76419
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000300
2
reference_url https://curl.se/docs/CVE-2018-1000300.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000300.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1575533
reference_id 1575533
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1575533
5
reference_url https://security.archlinux.org/ASA-201805-13
reference_id ASA-201805-13
reference_type
scores
url https://security.archlinux.org/ASA-201805-13
6
reference_url https://security.archlinux.org/ASA-201805-14
reference_id ASA-201805-14
reference_type
scores
url https://security.archlinux.org/ASA-201805-14
7
reference_url https://security.archlinux.org/ASA-201805-15
reference_id ASA-201805-15
reference_type
scores
url https://security.archlinux.org/ASA-201805-15
8
reference_url https://security.archlinux.org/ASA-201805-16
reference_id ASA-201805-16
reference_type
scores
url https://security.archlinux.org/ASA-201805-16
9
reference_url https://security.archlinux.org/ASA-201805-17
reference_id ASA-201805-17
reference_type
scores
url https://security.archlinux.org/ASA-201805-17
10
reference_url https://security.archlinux.org/ASA-201805-18
reference_id ASA-201805-18
reference_type
scores
url https://security.archlinux.org/ASA-201805-18
11
reference_url https://security.archlinux.org/AVG-694
reference_id AVG-694
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-694
12
reference_url https://security.archlinux.org/AVG-695
reference_id AVG-695
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-695
13
reference_url https://security.archlinux.org/AVG-696
reference_id AVG-696
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-696
14
reference_url https://security.archlinux.org/AVG-697
reference_id AVG-697
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-697
15
reference_url https://security.archlinux.org/AVG-698
reference_id AVG-698
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-698
16
reference_url https://security.archlinux.org/AVG-699
reference_id AVG-699
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-699
17
reference_url https://security.gentoo.org/glsa/201806-05
reference_id GLSA-201806-05
reference_type
scores
url https://security.gentoo.org/glsa/201806-05
fixed_packages
0
url pkg:generic/curl.se/curl@7.60.0
purl pkg:generic/curl.se/curl@7.60.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-738z-myg9-37hr
15
vulnerability VCID-7wqd-99h2-e7hk
16
vulnerability VCID-7yvu-s3p2-sfhc
17
vulnerability VCID-a58z-fu87-9ybs
18
vulnerability VCID-a8z6-bswu-jue8
19
vulnerability VCID-am31-t2h3-zbgw
20
vulnerability VCID-azcz-b8f2-63be
21
vulnerability VCID-bb6v-z8yg-6fe3
22
vulnerability VCID-bcuq-n4vb-k7f3
23
vulnerability VCID-bx2m-n5ft-3be8
24
vulnerability VCID-cdzf-3ydt-8bdk
25
vulnerability VCID-cfry-nx5h-kudv
26
vulnerability VCID-f7n8-zzhz-fuc8
27
vulnerability VCID-f9nm-d5ax-qkcb
28
vulnerability VCID-fcb7-8163-muf4
29
vulnerability VCID-fhc8-r8gv-bugj
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g7ux-4vz2-ckfg
32
vulnerability VCID-gud1-yg9u-zyfp
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-h6xj-mys4-pucf
35
vulnerability VCID-hhms-2hg6-nke9
36
vulnerability VCID-j688-cyfg-p7gu
37
vulnerability VCID-jnq1-hk6d-b3a3
38
vulnerability VCID-kkrm-dj79-4ucj
39
vulnerability VCID-kq38-7s5x-nqaz
40
vulnerability VCID-msd2-35g9-nyd2
41
vulnerability VCID-p7mn-a632-c3ag
42
vulnerability VCID-p97a-kjpp-f3d8
43
vulnerability VCID-q46r-7nct-s3bw
44
vulnerability VCID-q8tg-prj1-y7b8
45
vulnerability VCID-qrnc-7ywu-37cz
46
vulnerability VCID-r2g9-c896-rkge
47
vulnerability VCID-secz-78pt-dben
48
vulnerability VCID-sutv-qt2x-2yc7
49
vulnerability VCID-tcxd-z7f3-kkes
50
vulnerability VCID-td39-d3tf-vkhc
51
vulnerability VCID-ubnn-z97k-47gw
52
vulnerability VCID-uj78-2cgz-zbdb
53
vulnerability VCID-v82t-s9e1-2fbw
54
vulnerability VCID-vpkr-9akj-hbf6
55
vulnerability VCID-w472-84ep-fkdx
56
vulnerability VCID-w8ff-vxga-8qcz
57
vulnerability VCID-wbwx-5vg3-uqcd
58
vulnerability VCID-wmam-qmmg-6uay
59
vulnerability VCID-xgj8-zrta-kub9
60
vulnerability VCID-y41p-tgpa-m7cs
61
vulnerability VCID-y44u-23he-aya8
62
vulnerability VCID-yjtj-ydsg-u7ca
63
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.60.0
aliases CVE-2018-1000300
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kae8-wmf2-2kf1
40
url VCID-kkrm-dj79-4ucj
vulnerability_id VCID-kkrm-dj79-4ucj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
reference_id
reference_type
scores
0
value 0.00682
scoring_system epss
scoring_elements 0.72057
published_at 2026-06-05T12:55:00Z
1
value 0.00682
scoring_system epss
scoring_elements 0.72016
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
2
reference_url https://curl.se/docs/CVE-2022-27776.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27776.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1547048
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://hackerone.com/reports/1547048
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
reference_id 1010252
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
reference_id 2078408
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
reference_id 7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
23
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
reference_id DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
28
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
29
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
30
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
31
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.0
purl pkg:generic/curl.se/curl@7.83.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5m9y-9y57-kqg6
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6en5-etsd-2bce
10
vulnerability VCID-6ggz-pa5t-77c4
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-f9nm-d5ax-qkcb
20
vulnerability VCID-fcb7-8163-muf4
21
vulnerability VCID-g4n9-kg3s-pfcr
22
vulnerability VCID-g7ux-4vz2-ckfg
23
vulnerability VCID-gueb-wzpx-ufb2
24
vulnerability VCID-h4nw-va5b-23ef
25
vulnerability VCID-hb4z-s871-d7ck
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-jnq1-hk6d-b3a3
28
vulnerability VCID-k5vr-1fmp-sqbw
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-mqzd-mcw5-s3h6
31
vulnerability VCID-mray-vkqx-5ka7
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-r2g9-c896-rkge
37
vulnerability VCID-razg-yr7y-ukgd
38
vulnerability VCID-secz-78pt-dben
39
vulnerability VCID-sutv-qt2x-2yc7
40
vulnerability VCID-tzs5-qzhn-rqbk
41
vulnerability VCID-u1p8-s8vm-3yer
42
vulnerability VCID-v82t-s9e1-2fbw
43
vulnerability VCID-vpkr-9akj-hbf6
44
vulnerability VCID-w472-84ep-fkdx
45
vulnerability VCID-w8ff-vxga-8qcz
46
vulnerability VCID-wbwx-5vg3-uqcd
47
vulnerability VCID-wgur-psum-pbck
48
vulnerability VCID-wmam-qmmg-6uay
49
vulnerability VCID-xgj8-zrta-kub9
50
vulnerability VCID-y41p-tgpa-m7cs
51
vulnerability VCID-y44u-23he-aya8
52
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.0
aliases CVE-2022-27776
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kkrm-dj79-4ucj
41
url VCID-kq38-7s5x-nqaz
vulnerability_id VCID-kq38-7s5x-nqaz
summary libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-7264.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-7264.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-7264
reference_id
reference_type
scores
0
value 0.00796
scoring_system epss
scoring_elements 0.74375
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-7264
2
reference_url https://curl.se/docs/CVE-2024-7264.html
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://curl.se/docs/CVE-2024-7264.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2629968
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://hackerone.com/reports/2629968
6
reference_url http://www.openwall.com/lists/oss-security/2024/07/31/1
reference_id 1
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url http://www.openwall.com/lists/oss-security/2024/07/31/1
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077656
reference_id 1077656
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077656
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2301888
reference_id 2301888
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2301888
9
reference_url https://curl.se/docs/CVE-2024-7264.json
reference_id CVE-2024-7264.json
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://curl.se/docs/CVE-2024-7264.json
10
reference_url https://access.redhat.com/errata/RHSA-2024:7726
reference_id RHSA-2024:7726
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7726
11
reference_url https://access.redhat.com/errata/RHSA-2025:1671
reference_id RHSA-2025:1671
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1671
12
reference_url https://access.redhat.com/errata/RHSA-2025:1673
reference_id RHSA-2025:1673
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1673
13
reference_url https://usn.ubuntu.com/6944-1/
reference_id USN-6944-1
reference_type
scores
url https://usn.ubuntu.com/6944-1/
14
reference_url https://usn.ubuntu.com/6944-2/
reference_id USN-6944-2
reference_type
scores
url https://usn.ubuntu.com/6944-2/
fixed_packages
0
url pkg:generic/curl.se/curl@8.9.1
purl pkg:generic/curl.se/curl@8.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-bcuq-n4vb-k7f3
8
vulnerability VCID-bp56-gy66-mqae
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-g7ux-4vz2-ckfg
12
vulnerability VCID-gux4-dncg-h7a6
13
vulnerability VCID-hhms-2hg6-nke9
14
vulnerability VCID-ns6z-wp2x-fkdq
15
vulnerability VCID-p155-gbtu-abg1
16
vulnerability VCID-secz-78pt-dben
17
vulnerability VCID-t45k-skv6-cfg2
18
vulnerability VCID-u1p8-s8vm-3yer
19
vulnerability VCID-v82t-s9e1-2fbw
20
vulnerability VCID-w8ff-vxga-8qcz
21
vulnerability VCID-wgur-psum-pbck
22
vulnerability VCID-y41p-tgpa-m7cs
23
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.9.1
aliases CVE-2024-7264
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kq38-7s5x-nqaz
42
url VCID-msd2-35g9-nyd2
vulnerability_id VCID-msd2-35g9-nyd2
summary A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24369
published_at 2026-06-05T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24269
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
2
reference_url https://curl.se/docs/CVE-2020-8284.html
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://curl.se/docs/CVE-2020-8284.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/1040166
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://hackerone.com/reports/1040166
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
reference_id 1902667
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
reference_id 977163
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
15
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
17
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://www.debian.org/security/2021/dsa-4881
18
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.gentoo.org/glsa/202012-14
19
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212325
20
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212326
21
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212327
22
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
23
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
25
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
26
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
27
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
28
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
29
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.74.0
purl pkg:generic/curl.se/curl@7.74.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-738z-myg9-37hr
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7yvu-s3p2-sfhc
13
vulnerability VCID-7z3h-9pk3-rqct
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kn6z-caj8-bbc9
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-p155-gbtu-abg1
37
vulnerability VCID-p97a-kjpp-f3d8
38
vulnerability VCID-q8tg-prj1-y7b8
39
vulnerability VCID-r2g9-c896-rkge
40
vulnerability VCID-razg-yr7y-ukgd
41
vulnerability VCID-secz-78pt-dben
42
vulnerability VCID-sutv-qt2x-2yc7
43
vulnerability VCID-td39-d3tf-vkhc
44
vulnerability VCID-tzs5-qzhn-rqbk
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wgur-psum-pbck
52
vulnerability VCID-wmam-qmmg-6uay
53
vulnerability VCID-xgj8-zrta-kub9
54
vulnerability VCID-y41p-tgpa-m7cs
55
vulnerability VCID-y44u-23he-aya8
56
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0
aliases CVE-2020-8284
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-msd2-35g9-nyd2
43
url VCID-p7mn-a632-c3ag
vulnerability_id VCID-p7mn-a632-c3ag
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0500
reference_id
reference_type
scores
0
value 0.01242
scoring_system epss
scoring_elements 0.79627
published_at 2026-06-05T12:55:00Z
1
value 0.01242
scoring_system epss
scoring_elements 0.796
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0500
2
reference_url https://curl.se/docs/CVE-2018-0500.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-0500.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0500
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0500
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1597101
reference_id 1597101
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1597101
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903546
reference_id 903546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903546
7
reference_url https://security.archlinux.org/ASA-201807-10
reference_id ASA-201807-10
reference_type
scores
url https://security.archlinux.org/ASA-201807-10
8
reference_url https://security.archlinux.org/ASA-201807-5
reference_id ASA-201807-5
reference_type
scores
url https://security.archlinux.org/ASA-201807-5
9
reference_url https://security.archlinux.org/ASA-201807-6
reference_id ASA-201807-6
reference_type
scores
url https://security.archlinux.org/ASA-201807-6
10
reference_url https://security.archlinux.org/ASA-201807-7
reference_id ASA-201807-7
reference_type
scores
url https://security.archlinux.org/ASA-201807-7
11
reference_url https://security.archlinux.org/ASA-201807-8
reference_id ASA-201807-8
reference_type
scores
url https://security.archlinux.org/ASA-201807-8
12
reference_url https://security.archlinux.org/ASA-201807-9
reference_id ASA-201807-9
reference_type
scores
url https://security.archlinux.org/ASA-201807-9
13
reference_url https://security.archlinux.org/AVG-729
reference_id AVG-729
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-729
14
reference_url https://security.archlinux.org/AVG-730
reference_id AVG-730
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-730
15
reference_url https://security.archlinux.org/AVG-731
reference_id AVG-731
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-731
16
reference_url https://security.archlinux.org/AVG-732
reference_id AVG-732
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-732
17
reference_url https://security.archlinux.org/AVG-733
reference_id AVG-733
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-733
18
reference_url https://security.archlinux.org/AVG-734
reference_id AVG-734
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-734
19
reference_url https://security.gentoo.org/glsa/201807-04
reference_id GLSA-201807-04
reference_type
scores
url https://security.gentoo.org/glsa/201807-04
20
reference_url https://usn.ubuntu.com/3710-1/
reference_id USN-3710-1
reference_type
scores
url https://usn.ubuntu.com/3710-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.61.0
purl pkg:generic/curl.se/curl@7.61.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-738z-myg9-37hr
15
vulnerability VCID-7wqd-99h2-e7hk
16
vulnerability VCID-7yvu-s3p2-sfhc
17
vulnerability VCID-a58z-fu87-9ybs
18
vulnerability VCID-a8z6-bswu-jue8
19
vulnerability VCID-am31-t2h3-zbgw
20
vulnerability VCID-azcz-b8f2-63be
21
vulnerability VCID-bb6v-z8yg-6fe3
22
vulnerability VCID-bcuq-n4vb-k7f3
23
vulnerability VCID-bx2m-n5ft-3be8
24
vulnerability VCID-byzw-xw9s-pkga
25
vulnerability VCID-cdzf-3ydt-8bdk
26
vulnerability VCID-cfry-nx5h-kudv
27
vulnerability VCID-f7n8-zzhz-fuc8
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fcb7-8163-muf4
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kkrm-dj79-4ucj
40
vulnerability VCID-kq38-7s5x-nqaz
41
vulnerability VCID-msd2-35g9-nyd2
42
vulnerability VCID-p97a-kjpp-f3d8
43
vulnerability VCID-q46r-7nct-s3bw
44
vulnerability VCID-q8tg-prj1-y7b8
45
vulnerability VCID-qrnc-7ywu-37cz
46
vulnerability VCID-r2g9-c896-rkge
47
vulnerability VCID-secz-78pt-dben
48
vulnerability VCID-sutv-qt2x-2yc7
49
vulnerability VCID-tcxd-z7f3-kkes
50
vulnerability VCID-td39-d3tf-vkhc
51
vulnerability VCID-ubnn-z97k-47gw
52
vulnerability VCID-uj78-2cgz-zbdb
53
vulnerability VCID-v82t-s9e1-2fbw
54
vulnerability VCID-vpkr-9akj-hbf6
55
vulnerability VCID-w472-84ep-fkdx
56
vulnerability VCID-w8ff-vxga-8qcz
57
vulnerability VCID-wbwx-5vg3-uqcd
58
vulnerability VCID-wmam-qmmg-6uay
59
vulnerability VCID-xgj8-zrta-kub9
60
vulnerability VCID-y41p-tgpa-m7cs
61
vulnerability VCID-y44u-23he-aya8
62
vulnerability VCID-yjtj-ydsg-u7ca
63
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.61.0
aliases CVE-2018-0500
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7mn-a632-c3ag
44
url VCID-p8vk-yf66-wbb7
vulnerability_id VCID-p8vk-yf66-wbb7
summary A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
reference_id
reference_type
scores
0
value 0.02668
scoring_system epss
scoring_elements 0.86088
published_at 2026-06-04T12:55:00Z
1
value 0.02668
scoring_system epss
scoring_elements 0.86109
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
2
reference_url https://curl.se/docs/CVE-2018-1000121.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000121.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
reference_id 1552631
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
9
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
10
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
11
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
12
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
13
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
14
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
15
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
16
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
17
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
18
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
19
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
20
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
21
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:generic/curl.se/curl@7.59.0
purl pkg:generic/curl.se/curl@7.59.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-6745-tyba-33fa
15
vulnerability VCID-738z-myg9-37hr
16
vulnerability VCID-7wqd-99h2-e7hk
17
vulnerability VCID-7yvu-s3p2-sfhc
18
vulnerability VCID-a58z-fu87-9ybs
19
vulnerability VCID-a8z6-bswu-jue8
20
vulnerability VCID-am31-t2h3-zbgw
21
vulnerability VCID-azcz-b8f2-63be
22
vulnerability VCID-bb6v-z8yg-6fe3
23
vulnerability VCID-bcuq-n4vb-k7f3
24
vulnerability VCID-bx2m-n5ft-3be8
25
vulnerability VCID-cdzf-3ydt-8bdk
26
vulnerability VCID-cfry-nx5h-kudv
27
vulnerability VCID-f7n8-zzhz-fuc8
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fcb7-8163-muf4
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p97a-kjpp-f3d8
45
vulnerability VCID-q46r-7nct-s3bw
46
vulnerability VCID-q8tg-prj1-y7b8
47
vulnerability VCID-qrnc-7ywu-37cz
48
vulnerability VCID-r2g9-c896-rkge
49
vulnerability VCID-secz-78pt-dben
50
vulnerability VCID-sutv-qt2x-2yc7
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-ubnn-z97k-47gw
54
vulnerability VCID-uj78-2cgz-zbdb
55
vulnerability VCID-v82t-s9e1-2fbw
56
vulnerability VCID-vpkr-9akj-hbf6
57
vulnerability VCID-w472-84ep-fkdx
58
vulnerability VCID-w8ff-vxga-8qcz
59
vulnerability VCID-wbwx-5vg3-uqcd
60
vulnerability VCID-wmam-qmmg-6uay
61
vulnerability VCID-xgj8-zrta-kub9
62
vulnerability VCID-y41p-tgpa-m7cs
63
vulnerability VCID-y44u-23he-aya8
64
vulnerability VCID-yjtj-ydsg-u7ca
65
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.59.0
aliases CVE-2018-1000121
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p8vk-yf66-wbb7
45
url VCID-p97a-kjpp-f3d8
vulnerability_id VCID-p97a-kjpp-f3d8
summary A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27534.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27534.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27534
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.2016
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27534
2
reference_url https://curl.se/docs/CVE-2023-27534.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27534.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1892351
reference_id
reference_type
scores
url https://hackerone.com/reports/1892351
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179069
reference_id 2179069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179069
7
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
8
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
9
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
10
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
11
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.0.0
purl pkg:generic/curl.se/curl@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6en5-etsd-2bce
6
vulnerability VCID-6ggz-pa5t-77c4
7
vulnerability VCID-7wqd-99h2-e7hk
8
vulnerability VCID-85qb-zec7-subc
9
vulnerability VCID-a8z6-bswu-jue8
10
vulnerability VCID-bcuq-n4vb-k7f3
11
vulnerability VCID-f9nm-d5ax-qkcb
12
vulnerability VCID-fcb7-8163-muf4
13
vulnerability VCID-ffmg-djmk-57hn
14
vulnerability VCID-g4n9-kg3s-pfcr
15
vulnerability VCID-g7ux-4vz2-ckfg
16
vulnerability VCID-gux4-dncg-h7a6
17
vulnerability VCID-hhms-2hg6-nke9
18
vulnerability VCID-jnq1-hk6d-b3a3
19
vulnerability VCID-k3nv-gf9b-5ua2
20
vulnerability VCID-kq38-7s5x-nqaz
21
vulnerability VCID-p155-gbtu-abg1
22
vulnerability VCID-razg-yr7y-ukgd
23
vulnerability VCID-secz-78pt-dben
24
vulnerability VCID-sutv-qt2x-2yc7
25
vulnerability VCID-u1p8-s8vm-3yer
26
vulnerability VCID-v82t-s9e1-2fbw
27
vulnerability VCID-w472-84ep-fkdx
28
vulnerability VCID-w8ff-vxga-8qcz
29
vulnerability VCID-wgur-psum-pbck
30
vulnerability VCID-wmam-qmmg-6uay
31
vulnerability VCID-y41p-tgpa-m7cs
32
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.0.0
aliases CVE-2023-27534
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p97a-kjpp-f3d8
46
url VCID-q46r-7nct-s3bw
vulnerability_id VCID-q46r-7nct-s3bw
summary 
Out-of-bounds Write
curl is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8285.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8285.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8285
reference_id
reference_type
scores
0
value 0.00742
scoring_system epss
scoring_elements 0.73378
published_at 2026-06-05T12:55:00Z
1
value 0.00742
scoring_system epss
scoring_elements 0.73342
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8285
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1045844
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://hackerone.com/reports/1045844
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1902687
reference_id 1902687
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1902687
13
reference_url http://seclists.org/fulldisclosure/2021/Apr/51
reference_id 51
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url http://seclists.org/fulldisclosure/2021/Apr/51
14
reference_url https://github.com/curl/curl/issues/6255
reference_id 6255
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://github.com/curl/curl/issues/6255
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977162
reference_id 977162
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977162
16
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8285
reference_id CVE-2020-8285
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8285
18
reference_url https://curl.se/docs/CVE-2020-8285.html
reference_id CVE-2020-8285.HTML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://curl.se/docs/CVE-2020-8285.html
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
20
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://www.debian.org/security/2021/dsa-4881
21
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://security.gentoo.org/glsa/202012-14
22
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212325
23
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212326
24
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212327
25
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
26
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
27
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
28
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
29
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
30
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
31
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
32
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
33
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
34
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.74.0
purl pkg:generic/curl.se/curl@7.74.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-738z-myg9-37hr
11
vulnerability VCID-7wqd-99h2-e7hk
12
vulnerability VCID-7yvu-s3p2-sfhc
13
vulnerability VCID-7z3h-9pk3-rqct
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-cjyz-fdnv-b3g4
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-g4n9-kg3s-pfcr
28
vulnerability VCID-g7ux-4vz2-ckfg
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-hhms-2hg6-nke9
31
vulnerability VCID-j688-cyfg-p7gu
32
vulnerability VCID-jnq1-hk6d-b3a3
33
vulnerability VCID-kkrm-dj79-4ucj
34
vulnerability VCID-kn6z-caj8-bbc9
35
vulnerability VCID-kq38-7s5x-nqaz
36
vulnerability VCID-p155-gbtu-abg1
37
vulnerability VCID-p97a-kjpp-f3d8
38
vulnerability VCID-q8tg-prj1-y7b8
39
vulnerability VCID-r2g9-c896-rkge
40
vulnerability VCID-razg-yr7y-ukgd
41
vulnerability VCID-secz-78pt-dben
42
vulnerability VCID-sutv-qt2x-2yc7
43
vulnerability VCID-td39-d3tf-vkhc
44
vulnerability VCID-tzs5-qzhn-rqbk
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wgur-psum-pbck
52
vulnerability VCID-wmam-qmmg-6uay
53
vulnerability VCID-xgj8-zrta-kub9
54
vulnerability VCID-y41p-tgpa-m7cs
55
vulnerability VCID-y44u-23he-aya8
56
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.74.0
aliases CVE-2020-8285
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q46r-7nct-s3bw
47
url VCID-q8tg-prj1-y7b8
vulnerability_id VCID-q8tg-prj1-y7b8
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22946.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22946.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22946
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19785
published_at 2026-06-05T12:55:00Z
1
value 0.00063
scoring_system epss
scoring_elements 0.1971
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22946
2
reference_url https://curl.se/docs/CVE-2021-22946.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22946.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1334111
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://hackerone.com/reports/1334111
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017589
reference_id 1017589
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017589
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2003175
reference_id 2003175
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2003175
22
reference_url http://seclists.org/fulldisclosure/2022/Mar/29
reference_id 29
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url http://seclists.org/fulldisclosure/2022/Mar/29
23
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
reference_id APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
24
reference_url https://security.archlinux.org/AVG-2384
reference_id AVG-2384
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2384
25
reference_url https://security.archlinux.org/AVG-2385
reference_id AVG-2385
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2385
26
reference_url https://security.archlinux.org/AVG-2386
reference_id AVG-2386
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2386
27
reference_url https://security.archlinux.org/AVG-2387
reference_id AVG-2387
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2387
28
reference_url https://security.archlinux.org/AVG-2388
reference_id AVG-2388
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2388
29
reference_url https://security.archlinux.org/AVG-2389
reference_id AVG-2389
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2389
30
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://www.debian.org/security/2022/dsa-5197
31
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.gentoo.org/glsa/202212-01
32
reference_url https://support.apple.com/kb/HT213183
reference_id HT213183
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://support.apple.com/kb/HT213183
33
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
34
reference_url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
35
reference_url https://security.netapp.com/advisory/ntap-20211029-0003/
reference_id ntap-20211029-0003
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.netapp.com/advisory/ntap-20211029-0003/
36
reference_url https://security.netapp.com/advisory/ntap-20220121-0008/
reference_id ntap-20220121-0008
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.netapp.com/advisory/ntap-20220121-0008/
37
reference_url https://access.redhat.com/errata/RHSA-2021:4059
reference_id RHSA-2021:4059
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4059
38
reference_url https://access.redhat.com/errata/RHSA-2022:0635
reference_id RHSA-2022:0635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0635
39
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
40
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
reference_id RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
41
reference_url https://usn.ubuntu.com/5079-1/
reference_id USN-5079-1
reference_type
scores
url https://usn.ubuntu.com/5079-1/
42
reference_url https://usn.ubuntu.com/5079-2/
reference_id USN-5079-2
reference_type
scores
url https://usn.ubuntu.com/5079-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.79.0
purl pkg:generic/curl.se/curl@7.79.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7z3h-9pk3-rqct
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-j688-cyfg-p7gu
26
vulnerability VCID-jnq1-hk6d-b3a3
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kkrm-dj79-4ucj
29
vulnerability VCID-kq38-7s5x-nqaz
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-tzs5-qzhn-rqbk
39
vulnerability VCID-u1p8-s8vm-3yer
40
vulnerability VCID-urgp-rqyc-sqer
41
vulnerability VCID-v82t-s9e1-2fbw
42
vulnerability VCID-vpkr-9akj-hbf6
43
vulnerability VCID-w472-84ep-fkdx
44
vulnerability VCID-w8ff-vxga-8qcz
45
vulnerability VCID-wbwx-5vg3-uqcd
46
vulnerability VCID-wgur-psum-pbck
47
vulnerability VCID-wmam-qmmg-6uay
48
vulnerability VCID-xgj8-zrta-kub9
49
vulnerability VCID-y41p-tgpa-m7cs
50
vulnerability VCID-y44u-23he-aya8
51
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.79.0
aliases CVE-2021-22946
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q8tg-prj1-y7b8
48
url VCID-qrnc-7ywu-37cz
vulnerability_id VCID-qrnc-7ywu-37cz
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3822
reference_id
reference_type
scores
0
value 0.18518
scoring_system epss
scoring_elements 0.95379
published_at 2026-06-05T12:55:00Z
1
value 0.18518
scoring_system epss
scoring_elements 0.95371
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3822
2
reference_url https://curl.se/docs/CVE-2019-3822.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-3822.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106950
reference_id 106950
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url http://www.securityfocus.com/bid/106950
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670254
reference_id 1670254
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670254
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2019-3822.html
reference_id CVE-2019-3822.html
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://curl.haxx.se/docs/CVE-2019-3822.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.gentoo.org/glsa/201903-03
24
reference_url https://support.f5.com/csp/article/K84141449
reference_id K84141449
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://support.f5.com/csp/article/K84141449
25
reference_url https://support.f5.com/csp/article/K84141449?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K84141449?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://support.f5.com/csp/article/K84141449?utm_source=f5support&amp%3Butm_medium=RSS
26
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
27
reference_url https://security.netapp.com/advisory/ntap-20190719-0004/
reference_id ntap-20190719-0004
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.netapp.com/advisory/ntap-20190719-0004/
28
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://access.redhat.com/errata/RHSA-2019:3701
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822
reference_id show_bug.cgi?id=CVE-2019-3822
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822
30
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:generic/curl.se/curl@7.64.0
purl pkg:generic/curl.se/curl@7.64.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-58p5-pfy3-xug1
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-f7n8-zzhz-fuc8
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-fp66-fzqt-6yg7
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g7ux-4vz2-ckfg
30
vulnerability VCID-gud1-yg9u-zyfp
31
vulnerability VCID-gueb-wzpx-ufb2
32
vulnerability VCID-h6xj-mys4-pucf
33
vulnerability VCID-hhms-2hg6-nke9
34
vulnerability VCID-j688-cyfg-p7gu
35
vulnerability VCID-jnq1-hk6d-b3a3
36
vulnerability VCID-kkrm-dj79-4ucj
37
vulnerability VCID-kn6z-caj8-bbc9
38
vulnerability VCID-kq38-7s5x-nqaz
39
vulnerability VCID-msd2-35g9-nyd2
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-r2g9-c896-rkge
44
vulnerability VCID-secz-78pt-dben
45
vulnerability VCID-sutv-qt2x-2yc7
46
vulnerability VCID-tcxd-z7f3-kkes
47
vulnerability VCID-td39-d3tf-vkhc
48
vulnerability VCID-uj78-2cgz-zbdb
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wmam-qmmg-6uay
55
vulnerability VCID-xc5k-47n9-43d6
56
vulnerability VCID-xgj8-zrta-kub9
57
vulnerability VCID-y41p-tgpa-m7cs
58
vulnerability VCID-y44u-23he-aya8
59
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.64.0
aliases CVE-2019-3822
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qrnc-7ywu-37cz
49
url VCID-r2g9-c896-rkge
vulnerability_id VCID-r2g9-c896-rkge
summary A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-43552.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-43552.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-43552
reference_id
reference_type
scores
0
value 0.00104
scoring_system epss
scoring_elements 0.27848
published_at 2026-06-04T12:55:00Z
1
value 0.00104
scoring_system epss
scoring_elements 0.27915
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-43552
2
reference_url https://curl.se/docs/CVE-2022-43552.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-43552.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/1764858
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://hackerone.com/reports/1764858
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026830
reference_id 1026830
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026830
8
reference_url http://seclists.org/fulldisclosure/2023/Mar/17
reference_id 17
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url http://seclists.org/fulldisclosure/2023/Mar/17
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2152652
reference_id 2152652
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2152652
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://support.apple.com/kb/HT213670
reference_id HT213670
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://support.apple.com/kb/HT213670
12
reference_url https://security.netapp.com/advisory/ntap-20230214-0002/
reference_id ntap-20230214-0002
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://security.netapp.com/advisory/ntap-20230214-0002/
13
reference_url https://access.redhat.com/errata/RHSA-2023:2478
reference_id RHSA-2023:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2478
14
reference_url https://access.redhat.com/errata/RHSA-2023:2963
reference_id RHSA-2023:2963
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2963
15
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
16
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
17
reference_url https://access.redhat.com/errata/RHSA-2023:7743
reference_id RHSA-2023:7743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7743
18
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
19
reference_url https://usn.ubuntu.com/5788-1/
reference_id USN-5788-1
reference_type
scores
url https://usn.ubuntu.com/5788-1/
20
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.87.0
purl pkg:generic/curl.se/curl@7.87.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-21ff-tazv-9ud3
3
vulnerability VCID-287k-bzqy-n7ag
4
vulnerability VCID-39qh-jayw-g3dh
5
vulnerability VCID-3p2z-61gq-muhs
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6en5-etsd-2bce
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-7wqd-99h2-e7hk
10
vulnerability VCID-85qb-zec7-subc
11
vulnerability VCID-a8z6-bswu-jue8
12
vulnerability VCID-azcz-b8f2-63be
13
vulnerability VCID-bcuq-n4vb-k7f3
14
vulnerability VCID-bx2m-n5ft-3be8
15
vulnerability VCID-cfry-nx5h-kudv
16
vulnerability VCID-f9nm-d5ax-qkcb
17
vulnerability VCID-fcb7-8163-muf4
18
vulnerability VCID-ffmg-djmk-57hn
19
vulnerability VCID-g4n9-kg3s-pfcr
20
vulnerability VCID-g7ux-4vz2-ckfg
21
vulnerability VCID-gueb-wzpx-ufb2
22
vulnerability VCID-gux4-dncg-h7a6
23
vulnerability VCID-hhms-2hg6-nke9
24
vulnerability VCID-jnq1-hk6d-b3a3
25
vulnerability VCID-k3nv-gf9b-5ua2
26
vulnerability VCID-kq38-7s5x-nqaz
27
vulnerability VCID-nwvb-d466-4uaa
28
vulnerability VCID-p155-gbtu-abg1
29
vulnerability VCID-p97a-kjpp-f3d8
30
vulnerability VCID-razg-yr7y-ukgd
31
vulnerability VCID-secz-78pt-dben
32
vulnerability VCID-sutv-qt2x-2yc7
33
vulnerability VCID-u1p8-s8vm-3yer
34
vulnerability VCID-v82t-s9e1-2fbw
35
vulnerability VCID-w472-84ep-fkdx
36
vulnerability VCID-w8ff-vxga-8qcz
37
vulnerability VCID-wgur-psum-pbck
38
vulnerability VCID-wmam-qmmg-6uay
39
vulnerability VCID-y41p-tgpa-m7cs
40
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.87.0
aliases CVE-2022-43552
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r2g9-c896-rkge
50
url VCID-raxd-4nxj-gkhp
vulnerability_id VCID-raxd-4nxj-gkhp
summary libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000005
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58816
published_at 2026-06-04T12:55:00Z
1
value 0.00365
scoring_system epss
scoring_elements 0.58862
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000005
2
reference_url https://curl.se/docs/CVE-2018-1000005.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000005.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000005
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1536013
reference_id 1536013
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1536013
5
reference_url https://security.archlinux.org/ASA-201801-20
reference_id ASA-201801-20
reference_type
scores
url https://security.archlinux.org/ASA-201801-20
6
reference_url https://security.archlinux.org/ASA-201801-22
reference_id ASA-201801-22
reference_type
scores
url https://security.archlinux.org/ASA-201801-22
7
reference_url https://security.archlinux.org/ASA-201801-23
reference_id ASA-201801-23
reference_type
scores
url https://security.archlinux.org/ASA-201801-23
8
reference_url https://security.archlinux.org/ASA-201801-24
reference_id ASA-201801-24
reference_type
scores
url https://security.archlinux.org/ASA-201801-24
9
reference_url https://security.archlinux.org/ASA-201801-25
reference_id ASA-201801-25
reference_type
scores
url https://security.archlinux.org/ASA-201801-25
10
reference_url https://security.archlinux.org/ASA-201801-26
reference_id ASA-201801-26
reference_type
scores
url https://security.archlinux.org/ASA-201801-26
11
reference_url https://security.archlinux.org/AVG-593
reference_id AVG-593
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-593
12
reference_url https://security.archlinux.org/AVG-594
reference_id AVG-594
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-594
13
reference_url https://security.archlinux.org/AVG-595
reference_id AVG-595
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-595
14
reference_url https://security.archlinux.org/AVG-596
reference_id AVG-596
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-596
15
reference_url https://security.archlinux.org/AVG-597
reference_id AVG-597
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-597
16
reference_url https://security.archlinux.org/AVG-598
reference_id AVG-598
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-598
17
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
18
reference_url https://usn.ubuntu.com/3554-1/
reference_id USN-3554-1
reference_type
scores
url https://usn.ubuntu.com/3554-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.58.0
purl pkg:generic/curl.se/curl@7.58.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fcb7-8163-muf4
31
vulnerability VCID-fhc8-r8gv-bugj
32
vulnerability VCID-g4n9-kg3s-pfcr
33
vulnerability VCID-g7ux-4vz2-ckfg
34
vulnerability VCID-gud1-yg9u-zyfp
35
vulnerability VCID-gueb-wzpx-ufb2
36
vulnerability VCID-h6xj-mys4-pucf
37
vulnerability VCID-hhms-2hg6-nke9
38
vulnerability VCID-j688-cyfg-p7gu
39
vulnerability VCID-jnq1-hk6d-b3a3
40
vulnerability VCID-kae8-wmf2-2kf1
41
vulnerability VCID-kkrm-dj79-4ucj
42
vulnerability VCID-kq38-7s5x-nqaz
43
vulnerability VCID-msd2-35g9-nyd2
44
vulnerability VCID-p7mn-a632-c3ag
45
vulnerability VCID-p8vk-yf66-wbb7
46
vulnerability VCID-p97a-kjpp-f3d8
47
vulnerability VCID-q46r-7nct-s3bw
48
vulnerability VCID-q8tg-prj1-y7b8
49
vulnerability VCID-qrnc-7ywu-37cz
50
vulnerability VCID-r2g9-c896-rkge
51
vulnerability VCID-secz-78pt-dben
52
vulnerability VCID-sutv-qt2x-2yc7
53
vulnerability VCID-tcxd-z7f3-kkes
54
vulnerability VCID-td39-d3tf-vkhc
55
vulnerability VCID-tn33-re3r-yfhw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-v82t-s9e1-2fbw
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.58.0
aliases CVE-2018-1000005
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-raxd-4nxj-gkhp
51
url VCID-rt5e-saz2-j7c9
vulnerability_id VCID-rt5e-saz2-j7c9
summary libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
reference_id
reference_type
scores
0
value 0.03854
scoring_system epss
scoring_elements 0.88416
published_at 2026-06-04T12:55:00Z
1
value 0.03854
scoring_system epss
scoring_elements 0.88434
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
2
reference_url https://curl.se/docs/CVE-2018-1000007.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000007.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
reference_id 1537125
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
6
reference_url https://security.archlinux.org/ASA-201801-20
reference_id ASA-201801-20
reference_type
scores
url https://security.archlinux.org/ASA-201801-20
7
reference_url https://security.archlinux.org/ASA-201801-22
reference_id ASA-201801-22
reference_type
scores
url https://security.archlinux.org/ASA-201801-22
8
reference_url https://security.archlinux.org/ASA-201801-23
reference_id ASA-201801-23
reference_type
scores
url https://security.archlinux.org/ASA-201801-23
9
reference_url https://security.archlinux.org/ASA-201801-24
reference_id ASA-201801-24
reference_type
scores
url https://security.archlinux.org/ASA-201801-24
10
reference_url https://security.archlinux.org/ASA-201801-25
reference_id ASA-201801-25
reference_type
scores
url https://security.archlinux.org/ASA-201801-25
11
reference_url https://security.archlinux.org/ASA-201801-26
reference_id ASA-201801-26
reference_type
scores
url https://security.archlinux.org/ASA-201801-26
12
reference_url https://security.archlinux.org/AVG-593
reference_id AVG-593
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-593
13
reference_url https://security.archlinux.org/AVG-594
reference_id AVG-594
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-594
14
reference_url https://security.archlinux.org/AVG-595
reference_id AVG-595
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-595
15
reference_url https://security.archlinux.org/AVG-596
reference_id AVG-596
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-596
16
reference_url https://security.archlinux.org/AVG-597
reference_id AVG-597
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-597
17
reference_url https://security.archlinux.org/AVG-598
reference_id AVG-598
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-598
18
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
19
reference_url https://usn.ubuntu.com/3554-1/
reference_id USN-3554-1
reference_type
scores
url https://usn.ubuntu.com/3554-1/
20
reference_url https://usn.ubuntu.com/3554-2/
reference_id USN-3554-2
reference_type
scores
url https://usn.ubuntu.com/3554-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.58.0
purl pkg:generic/curl.se/curl@7.58.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fcb7-8163-muf4
31
vulnerability VCID-fhc8-r8gv-bugj
32
vulnerability VCID-g4n9-kg3s-pfcr
33
vulnerability VCID-g7ux-4vz2-ckfg
34
vulnerability VCID-gud1-yg9u-zyfp
35
vulnerability VCID-gueb-wzpx-ufb2
36
vulnerability VCID-h6xj-mys4-pucf
37
vulnerability VCID-hhms-2hg6-nke9
38
vulnerability VCID-j688-cyfg-p7gu
39
vulnerability VCID-jnq1-hk6d-b3a3
40
vulnerability VCID-kae8-wmf2-2kf1
41
vulnerability VCID-kkrm-dj79-4ucj
42
vulnerability VCID-kq38-7s5x-nqaz
43
vulnerability VCID-msd2-35g9-nyd2
44
vulnerability VCID-p7mn-a632-c3ag
45
vulnerability VCID-p8vk-yf66-wbb7
46
vulnerability VCID-p97a-kjpp-f3d8
47
vulnerability VCID-q46r-7nct-s3bw
48
vulnerability VCID-q8tg-prj1-y7b8
49
vulnerability VCID-qrnc-7ywu-37cz
50
vulnerability VCID-r2g9-c896-rkge
51
vulnerability VCID-secz-78pt-dben
52
vulnerability VCID-sutv-qt2x-2yc7
53
vulnerability VCID-tcxd-z7f3-kkes
54
vulnerability VCID-td39-d3tf-vkhc
55
vulnerability VCID-tn33-re3r-yfhw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-v82t-s9e1-2fbw
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.58.0
aliases CVE-2018-1000007
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rt5e-saz2-j7c9
52
url VCID-secz-78pt-dben
vulnerability_id VCID-secz-78pt-dben
summary curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6253.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-6253.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-6253
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.08936
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-6253
2
reference_url https://curl.se/docs/CVE-2026-6253.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:42:30Z/
url https://curl.se/docs/CVE-2026-6253.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6253
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6253
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3669637
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:42:30Z/
url https://hackerone.com/reports/3669637
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461202
reference_id 2461202
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461202
7
reference_url https://curl.se/docs/CVE-2026-6253.json
reference_id CVE-2026-6253.json
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T17:42:30Z/
url https://curl.se/docs/CVE-2026-6253.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-6253
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-secz-78pt-dben
53
url VCID-sutv-qt2x-2yc7
vulnerability_id VCID-sutv-qt2x-2yc7
summary An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
reference_id
reference_type
scores
0
value 0.00631
scoring_system epss
scoring_elements 0.70725
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
2
reference_url https://curl.se/docs/CVE-2023-28322.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28322.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1954658
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://hackerone.com/reports/1954658
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
reference_id 2196793
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
reference_id msg00015.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
20
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
21
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
22
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
23
reference_url https://access.redhat.com/errata/RHSA-2024:0585
reference_id RHSA-2024:0585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0585
24
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
25
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
26
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
27
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
28
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
29
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:generic/curl.se/curl@8.1.0
purl pkg:generic/curl.se/curl@8.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-k3nv-gf9b-5ua2
17
vulnerability VCID-kq38-7s5x-nqaz
18
vulnerability VCID-p155-gbtu-abg1
19
vulnerability VCID-razg-yr7y-ukgd
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w472-84ep-fkdx
24
vulnerability VCID-w8ff-vxga-8qcz
25
vulnerability VCID-wgur-psum-pbck
26
vulnerability VCID-wmam-qmmg-6uay
27
vulnerability VCID-y41p-tgpa-m7cs
28
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.1.0
aliases CVE-2023-28322
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sutv-qt2x-2yc7
54
url VCID-tcxd-z7f3-kkes
vulnerability_id VCID-tcxd-z7f3-kkes
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5436
reference_id
reference_type
scores
0
value 0.15484
scoring_system epss
scoring_elements 0.94797
published_at 2026-06-05T12:55:00Z
1
value 0.15484
scoring_system epss
scoring_elements 0.94788
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5436
2
reference_url https://curl.se/docs/CVE-2019-5436.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5436.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/550696
reference_id
reference_type
scores
url https://hackerone.com/reports/550696
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1710620
reference_id 1710620
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1710620
7
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://seclists.org/bugtraq/2020/Feb/36
8
reference_url http://www.openwall.com/lists/oss-security/2019/09/11/6
reference_id 6
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://www.openwall.com/lists/oss-security/2019/09/11/6
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929351
reference_id 929351
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929351
10
reference_url https://security.archlinux.org/ASA-201905-11
reference_id ASA-201905-11
reference_type
scores
url https://security.archlinux.org/ASA-201905-11
11
reference_url https://security.archlinux.org/ASA-201905-12
reference_id ASA-201905-12
reference_type
scores
url https://security.archlinux.org/ASA-201905-12
12
reference_url https://security.archlinux.org/ASA-201905-13
reference_id ASA-201905-13
reference_type
scores
url https://security.archlinux.org/ASA-201905-13
13
reference_url https://security.archlinux.org/ASA-201905-14
reference_id ASA-201905-14
reference_type
scores
url https://security.archlinux.org/ASA-201905-14
14
reference_url https://security.archlinux.org/ASA-201905-15
reference_id ASA-201905-15
reference_type
scores
url https://security.archlinux.org/ASA-201905-15
15
reference_url https://security.archlinux.org/ASA-201905-16
reference_id ASA-201905-16
reference_type
scores
url https://security.archlinux.org/ASA-201905-16
16
reference_url https://security.archlinux.org/AVG-959
reference_id AVG-959
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-959
17
reference_url https://security.archlinux.org/AVG-960
reference_id AVG-960
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-960
18
reference_url https://security.archlinux.org/AVG-961
reference_id AVG-961
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-961
19
reference_url https://security.archlinux.org/AVG-962
reference_id AVG-962
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-962
20
reference_url https://security.archlinux.org/AVG-963
reference_id AVG-963
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-963
21
reference_url https://security.archlinux.org/AVG-964
reference_id AVG-964
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-964
22
reference_url https://curl.haxx.se/docs/CVE-2019-5436.html
reference_id CVE-2019-5436.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://curl.haxx.se/docs/CVE-2019-5436.html
23
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://www.debian.org/security/2020/dsa-4633
24
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://security.gentoo.org/glsa/202003-29
25
reference_url https://support.f5.com/csp/article/K55133295
reference_id K55133295
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://support.f5.com/csp/article/K55133295
26
reference_url https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K55133295?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS
27
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
reference_id msg00008.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
28
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
29
reference_url https://security.netapp.com/advisory/ntap-20190606-0004/
reference_id ntap-20190606-0004
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://security.netapp.com/advisory/ntap-20190606-0004/
30
reference_url https://access.redhat.com/errata/RHSA-2020:1020
reference_id RHSA-2020:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1020
31
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
32
reference_url https://access.redhat.com/errata/RHSA-2020:2505
reference_id RHSA-2020:2505
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2505
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
reference_id SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
34
reference_url https://usn.ubuntu.com/3993-1/
reference_id USN-3993-1
reference_type
scores
url https://usn.ubuntu.com/3993-1/
35
reference_url https://usn.ubuntu.com/3993-2/
reference_id USN-3993-2
reference_type
scores
url https://usn.ubuntu.com/3993-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.65.0
purl pkg:generic/curl.se/curl@7.65.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-58p5-pfy3-xug1
10
vulnerability VCID-5un8-xymy-37bt
11
vulnerability VCID-738z-myg9-37hr
12
vulnerability VCID-7wqd-99h2-e7hk
13
vulnerability VCID-7yvu-s3p2-sfhc
14
vulnerability VCID-a58z-fu87-9ybs
15
vulnerability VCID-a8z6-bswu-jue8
16
vulnerability VCID-am31-t2h3-zbgw
17
vulnerability VCID-azcz-b8f2-63be
18
vulnerability VCID-bcuq-n4vb-k7f3
19
vulnerability VCID-bx2m-n5ft-3be8
20
vulnerability VCID-byzw-xw9s-pkga
21
vulnerability VCID-cdzf-3ydt-8bdk
22
vulnerability VCID-cfry-nx5h-kudv
23
vulnerability VCID-f7n8-zzhz-fuc8
24
vulnerability VCID-f9nm-d5ax-qkcb
25
vulnerability VCID-fcb7-8163-muf4
26
vulnerability VCID-fhc8-r8gv-bugj
27
vulnerability VCID-fp66-fzqt-6yg7
28
vulnerability VCID-g4n9-kg3s-pfcr
29
vulnerability VCID-g7ux-4vz2-ckfg
30
vulnerability VCID-gud1-yg9u-zyfp
31
vulnerability VCID-gueb-wzpx-ufb2
32
vulnerability VCID-h6xj-mys4-pucf
33
vulnerability VCID-hhms-2hg6-nke9
34
vulnerability VCID-j688-cyfg-p7gu
35
vulnerability VCID-jnq1-hk6d-b3a3
36
vulnerability VCID-kkrm-dj79-4ucj
37
vulnerability VCID-kn6z-caj8-bbc9
38
vulnerability VCID-kq38-7s5x-nqaz
39
vulnerability VCID-msd2-35g9-nyd2
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-r2g9-c896-rkge
44
vulnerability VCID-secz-78pt-dben
45
vulnerability VCID-sutv-qt2x-2yc7
46
vulnerability VCID-td39-d3tf-vkhc
47
vulnerability VCID-uj78-2cgz-zbdb
48
vulnerability VCID-urgp-rqyc-sqer
49
vulnerability VCID-v82t-s9e1-2fbw
50
vulnerability VCID-vpkr-9akj-hbf6
51
vulnerability VCID-w472-84ep-fkdx
52
vulnerability VCID-w8ff-vxga-8qcz
53
vulnerability VCID-wbwx-5vg3-uqcd
54
vulnerability VCID-wmam-qmmg-6uay
55
vulnerability VCID-xgj8-zrta-kub9
56
vulnerability VCID-y41p-tgpa-m7cs
57
vulnerability VCID-y44u-23he-aya8
58
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.65.0
aliases CVE-2019-5436
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tcxd-z7f3-kkes
55
url VCID-td39-d3tf-vkhc
vulnerability_id VCID-td39-d3tf-vkhc
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
reference_id
reference_type
scores
0
value 0.0056
scoring_system epss
scoring_elements 0.68682
published_at 2026-06-05T12:55:00Z
1
value 0.0056
scoring_system epss
scoring_elements 0.68641
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
2
reference_url https://curl.se/docs/CVE-2021-22924.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22924.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1223565
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://hackerone.com/reports/1223565
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
reference_id 1981460
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
21
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
reference_id 991492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
22
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
23
reference_url https://security.archlinux.org/ASA-202107-60
reference_id ASA-202107-60
reference_type
scores
url https://security.archlinux.org/ASA-202107-60
24
reference_url https://security.archlinux.org/ASA-202107-61
reference_id ASA-202107-61
reference_type
scores
url https://security.archlinux.org/ASA-202107-61
25
reference_url https://security.archlinux.org/ASA-202107-62
reference_id ASA-202107-62
reference_type
scores
url https://security.archlinux.org/ASA-202107-62
26
reference_url https://security.archlinux.org/ASA-202107-63
reference_id ASA-202107-63
reference_type
scores
url https://security.archlinux.org/ASA-202107-63
27
reference_url https://security.archlinux.org/ASA-202107-64
reference_id ASA-202107-64
reference_type
scores
url https://security.archlinux.org/ASA-202107-64
28
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
29
reference_url https://security.archlinux.org/AVG-2195
reference_id AVG-2195
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2195
30
reference_url https://security.archlinux.org/AVG-2196
reference_id AVG-2196
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2196
31
reference_url https://security.archlinux.org/AVG-2197
reference_id AVG-2197
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2197
32
reference_url https://security.archlinux.org/AVG-2198
reference_id AVG-2198
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2198
33
reference_url https://security.archlinux.org/AVG-2199
reference_id AVG-2199
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2199
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
reference_id CVE-2021-22924
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
35
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://www.debian.org/security/2022/dsa-5197
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
37
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
38
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
39
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
40
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
44
reference_url https://access.redhat.com/errata/RHSA-2021:3582
reference_id RHSA-2021:3582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3582
45
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
46
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
reference_id ssa-484086.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
47
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
reference_id ssa-732250.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
48
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.78.0
purl pkg:generic/curl.se/curl@7.78.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6ggz-pa5t-77c4
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bcuq-n4vb-k7f3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-f9nm-d5ax-qkcb
21
vulnerability VCID-fcb7-8163-muf4
22
vulnerability VCID-g4n9-kg3s-pfcr
23
vulnerability VCID-g7ux-4vz2-ckfg
24
vulnerability VCID-gueb-wzpx-ufb2
25
vulnerability VCID-h4nw-va5b-23ef
26
vulnerability VCID-hhms-2hg6-nke9
27
vulnerability VCID-j688-cyfg-p7gu
28
vulnerability VCID-jnq1-hk6d-b3a3
29
vulnerability VCID-k5vr-1fmp-sqbw
30
vulnerability VCID-kkrm-dj79-4ucj
31
vulnerability VCID-kq38-7s5x-nqaz
32
vulnerability VCID-ns58-vmsz-5ued
33
vulnerability VCID-nwvb-d466-4uaa
34
vulnerability VCID-p155-gbtu-abg1
35
vulnerability VCID-p97a-kjpp-f3d8
36
vulnerability VCID-q8tg-prj1-y7b8
37
vulnerability VCID-r2g9-c896-rkge
38
vulnerability VCID-razg-yr7y-ukgd
39
vulnerability VCID-secz-78pt-dben
40
vulnerability VCID-sutv-qt2x-2yc7
41
vulnerability VCID-tzs5-qzhn-rqbk
42
vulnerability VCID-u1p8-s8vm-3yer
43
vulnerability VCID-urgp-rqyc-sqer
44
vulnerability VCID-v82t-s9e1-2fbw
45
vulnerability VCID-vpkr-9akj-hbf6
46
vulnerability VCID-w472-84ep-fkdx
47
vulnerability VCID-w8ff-vxga-8qcz
48
vulnerability VCID-wbwx-5vg3-uqcd
49
vulnerability VCID-wgur-psum-pbck
50
vulnerability VCID-wmam-qmmg-6uay
51
vulnerability VCID-xgj8-zrta-kub9
52
vulnerability VCID-y41p-tgpa-m7cs
53
vulnerability VCID-y44u-23he-aya8
54
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.78.0
aliases CVE-2021-22924
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-td39-d3tf-vkhc
56
url VCID-tn33-re3r-yfhw
vulnerability_id VCID-tn33-re3r-yfhw
summary 
Out-of-bounds Write
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
references
0
reference_url https://access.redhat.com/errata/RHBA-2019:0327
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2019:0327
1
reference_url https://access.redhat.com/errata/RHSA-2018:3157
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3157
2
reference_url https://access.redhat.com/errata/RHSA-2018:3558
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3558
3
reference_url https://access.redhat.com/errata/RHSA-2019:1543
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1543
4
reference_url https://access.redhat.com/errata/RHSA-2020:0544
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0544
5
reference_url https://access.redhat.com/errata/RHSA-2020:0594
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0594
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
reference_id
reference_type
scores
0
value 0.01298
scoring_system epss
scoring_elements 0.80056
published_at 2026-06-04T12:55:00Z
1
value 0.01298
scoring_system epss
scoring_elements 0.80081
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
8
reference_url https://curl.haxx.se/docs/adv_2018-9cd6.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.haxx.se/docs/adv_2018-9cd6.html
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://github.com/coapp-packages/curl
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/coapp-packages/curl
14
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
15
reference_url https://usn.ubuntu.com/3598-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-1
16
reference_url https://usn.ubuntu.com/3598-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-1/
17
reference_url https://usn.ubuntu.com/3598-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-2
18
reference_url https://usn.ubuntu.com/3598-2/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-2/
19
reference_url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
20
reference_url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
21
reference_url https://www.debian.org/security/2018/dsa-4136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4136
22
reference_url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
23
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
24
reference_url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
25
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
26
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
reference_id 1552628
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
28
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
29
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
30
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
31
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
32
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
33
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
34
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
35
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
36
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
37
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
38
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
39
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
40
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
reference_id CVE-2018-1000120
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
42
reference_url https://curl.se/docs/CVE-2018-1000120.html
reference_id CVE-2018-1000120.HTML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value High
scoring_system cvssv3.1
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.se/docs/CVE-2018-1000120.html
43
reference_url https://github.com/advisories/GHSA-674j-7m97-j2p9
reference_id GHSA-674j-7m97-j2p9
reference_type
scores
url https://github.com/advisories/GHSA-674j-7m97-j2p9
44
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:generic/curl.se/curl@7.59.0
purl pkg:generic/curl.se/curl@7.59.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5un8-xymy-37bt
14
vulnerability VCID-6745-tyba-33fa
15
vulnerability VCID-738z-myg9-37hr
16
vulnerability VCID-7wqd-99h2-e7hk
17
vulnerability VCID-7yvu-s3p2-sfhc
18
vulnerability VCID-a58z-fu87-9ybs
19
vulnerability VCID-a8z6-bswu-jue8
20
vulnerability VCID-am31-t2h3-zbgw
21
vulnerability VCID-azcz-b8f2-63be
22
vulnerability VCID-bb6v-z8yg-6fe3
23
vulnerability VCID-bcuq-n4vb-k7f3
24
vulnerability VCID-bx2m-n5ft-3be8
25
vulnerability VCID-cdzf-3ydt-8bdk
26
vulnerability VCID-cfry-nx5h-kudv
27
vulnerability VCID-f7n8-zzhz-fuc8
28
vulnerability VCID-f9nm-d5ax-qkcb
29
vulnerability VCID-fcb7-8163-muf4
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p97a-kjpp-f3d8
45
vulnerability VCID-q46r-7nct-s3bw
46
vulnerability VCID-q8tg-prj1-y7b8
47
vulnerability VCID-qrnc-7ywu-37cz
48
vulnerability VCID-r2g9-c896-rkge
49
vulnerability VCID-secz-78pt-dben
50
vulnerability VCID-sutv-qt2x-2yc7
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-ubnn-z97k-47gw
54
vulnerability VCID-uj78-2cgz-zbdb
55
vulnerability VCID-v82t-s9e1-2fbw
56
vulnerability VCID-vpkr-9akj-hbf6
57
vulnerability VCID-w472-84ep-fkdx
58
vulnerability VCID-w8ff-vxga-8qcz
59
vulnerability VCID-wbwx-5vg3-uqcd
60
vulnerability VCID-wmam-qmmg-6uay
61
vulnerability VCID-xgj8-zrta-kub9
62
vulnerability VCID-y41p-tgpa-m7cs
63
vulnerability VCID-y44u-23he-aya8
64
vulnerability VCID-yjtj-ydsg-u7ca
65
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.59.0
aliases CVE-2018-1000120, GHSA-674j-7m97-j2p9
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tn33-re3r-yfhw
57
url VCID-uj78-2cgz-zbdb
vulnerability_id VCID-uj78-2cgz-zbdb
summary Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5481
reference_id
reference_type
scores
0
value 0.03612
scoring_system epss
scoring_elements 0.87996
published_at 2026-06-04T12:55:00Z
1
value 0.03612
scoring_system epss
scoring_elements 0.88017
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5481
2
reference_url https://curl.se/docs/CVE-2019-5481.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5481.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/686823
reference_id
reference_type
scores
url https://hackerone.com/reports/686823
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1749402
reference_id 1749402
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1749402
8
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://seclists.org/bugtraq/2020/Feb/36
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
reference_id 6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940009
reference_id 940009
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940009
11
reference_url https://security.archlinux.org/AVG-1982
reference_id AVG-1982
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1982
12
reference_url https://curl.haxx.se/docs/CVE-2019-5481.html
reference_id CVE-2019-5481.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://curl.haxx.se/docs/CVE-2019-5481.html
13
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://www.debian.org/security/2020/dsa-4633
14
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://security.gentoo.org/glsa/202003-29
15
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
reference_id msg00048.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
16
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
reference_id msg00055.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
17
reference_url https://security.netapp.com/advisory/ntap-20191004-0003/
reference_id ntap-20191004-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://security.netapp.com/advisory/ntap-20191004-0003/
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
reference_id RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
19
reference_url https://access.redhat.com/errata/RHSA-2020:0250
reference_id RHSA-2020:0250
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0250
20
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
21
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
reference_id UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
22
reference_url https://usn.ubuntu.com/4129-1/
reference_id USN-4129-1
reference_type
scores
url https://usn.ubuntu.com/4129-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.66.0
purl pkg:generic/curl.se/curl@7.66.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-5un8-xymy-37bt
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-a58z-fu87-9ybs
13
vulnerability VCID-a8z6-bswu-jue8
14
vulnerability VCID-am31-t2h3-zbgw
15
vulnerability VCID-azcz-b8f2-63be
16
vulnerability VCID-bcuq-n4vb-k7f3
17
vulnerability VCID-bx2m-n5ft-3be8
18
vulnerability VCID-byzw-xw9s-pkga
19
vulnerability VCID-cdzf-3ydt-8bdk
20
vulnerability VCID-cfry-nx5h-kudv
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f9nm-d5ax-qkcb
23
vulnerability VCID-fcb7-8163-muf4
24
vulnerability VCID-fhc8-r8gv-bugj
25
vulnerability VCID-fp66-fzqt-6yg7
26
vulnerability VCID-g4n9-kg3s-pfcr
27
vulnerability VCID-g7ux-4vz2-ckfg
28
vulnerability VCID-gud1-yg9u-zyfp
29
vulnerability VCID-gueb-wzpx-ufb2
30
vulnerability VCID-h6xj-mys4-pucf
31
vulnerability VCID-hhms-2hg6-nke9
32
vulnerability VCID-j688-cyfg-p7gu
33
vulnerability VCID-jnq1-hk6d-b3a3
34
vulnerability VCID-kkrm-dj79-4ucj
35
vulnerability VCID-kn6z-caj8-bbc9
36
vulnerability VCID-kq38-7s5x-nqaz
37
vulnerability VCID-msd2-35g9-nyd2
38
vulnerability VCID-p97a-kjpp-f3d8
39
vulnerability VCID-q46r-7nct-s3bw
40
vulnerability VCID-q8tg-prj1-y7b8
41
vulnerability VCID-r2g9-c896-rkge
42
vulnerability VCID-secz-78pt-dben
43
vulnerability VCID-sutv-qt2x-2yc7
44
vulnerability VCID-td39-d3tf-vkhc
45
vulnerability VCID-urgp-rqyc-sqer
46
vulnerability VCID-v82t-s9e1-2fbw
47
vulnerability VCID-vpkr-9akj-hbf6
48
vulnerability VCID-w472-84ep-fkdx
49
vulnerability VCID-w8ff-vxga-8qcz
50
vulnerability VCID-wbwx-5vg3-uqcd
51
vulnerability VCID-wmam-qmmg-6uay
52
vulnerability VCID-xgj8-zrta-kub9
53
vulnerability VCID-y41p-tgpa-m7cs
54
vulnerability VCID-y44u-23he-aya8
55
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.66.0
aliases CVE-2019-5481
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uj78-2cgz-zbdb
58
url VCID-vpkr-9akj-hbf6
vulnerability_id VCID-vpkr-9akj-hbf6
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27782
reference_id
reference_type
scores
0
value 0.00469
scoring_system epss
scoring_elements 0.64872
published_at 2026-06-04T12:55:00Z
1
value 0.00469
scoring_system epss
scoring_elements 0.64914
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27782
2
reference_url https://curl.se/docs/CVE-2022-27782.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27782.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1555796
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://hackerone.com/reports/1555796
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2082215
reference_id 2082215
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2082215
21
reference_url http://www.openwall.com/lists/oss-security/2023/03/20/6
reference_id 6
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url http://www.openwall.com/lists/oss-security/2023/03/20/6
22
reference_url https://security.archlinux.org/AVG-2706
reference_id AVG-2706
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2706
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0009/
reference_id ntap-20220609-0009
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://security.netapp.com/advisory/ntap-20220609-0009/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5412-1/
reference_id USN-5412-1
reference_type
scores
url https://usn.ubuntu.com/5412-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.1
purl pkg:generic/curl.se/curl@7.83.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6en5-etsd-2bce
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7z3h-9pk3-rqct
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k5vr-1fmp-sqbw
27
vulnerability VCID-kq38-7s5x-nqaz
28
vulnerability VCID-ns58-vmsz-5ued
29
vulnerability VCID-nwvb-d466-4uaa
30
vulnerability VCID-p155-gbtu-abg1
31
vulnerability VCID-p97a-kjpp-f3d8
32
vulnerability VCID-r2g9-c896-rkge
33
vulnerability VCID-razg-yr7y-ukgd
34
vulnerability VCID-secz-78pt-dben
35
vulnerability VCID-sutv-qt2x-2yc7
36
vulnerability VCID-tzs5-qzhn-rqbk
37
vulnerability VCID-u1p8-s8vm-3yer
38
vulnerability VCID-v82t-s9e1-2fbw
39
vulnerability VCID-w472-84ep-fkdx
40
vulnerability VCID-w8ff-vxga-8qcz
41
vulnerability VCID-wbwx-5vg3-uqcd
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-xgj8-zrta-kub9
45
vulnerability VCID-y41p-tgpa-m7cs
46
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.1
aliases CVE-2022-27782
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vpkr-9akj-hbf6
59
url VCID-w472-84ep-fkdx
vulnerability_id VCID-w472-84ep-fkdx
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
reference_id
reference_type
scores
0
value 0.00441
scoring_system epss
scoring_elements 0.63576
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2148242
reference_id
reference_type
scores
url https://hackerone.com/reports/2148242
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
reference_id 2241938
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
7
reference_url http://seclists.org/fulldisclosure/2024/Jan/34
reference_id 34
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/34
8
reference_url http://seclists.org/fulldisclosure/2024/Jan/37
reference_id 37
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/37
9
reference_url http://seclists.org/fulldisclosure/2024/Jan/38
reference_id 38
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/38
10
reference_url https://security.archlinux.org/AVG-2845
reference_id AVG-2845
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2845
11
reference_url https://security.archlinux.org/AVG-2846
reference_id AVG-2846
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2846
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
reference_id CVE-2023-38546
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
13
reference_url https://curl.se/docs/CVE-2023-38546.html
reference_id CVE-2023-38546.HTML
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://curl.se/docs/CVE-2023-38546.html
14
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
15
reference_url https://support.apple.com/kb/HT214036
reference_id HT214036
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214036
16
reference_url https://support.apple.com/kb/HT214057
reference_id HT214057
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214057
17
reference_url https://support.apple.com/kb/HT214058
reference_id HT214058
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214058
18
reference_url https://support.apple.com/kb/HT214063
reference_id HT214063
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214063
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
reference_id OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
20
reference_url https://access.redhat.com/errata/RHSA-2023:5700
reference_id RHSA-2023:5700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5700
21
reference_url https://access.redhat.com/errata/RHSA-2023:5763
reference_id RHSA-2023:5763
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5763
22
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
23
reference_url https://access.redhat.com/errata/RHSA-2023:6745
reference_id RHSA-2023:6745
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6745
24
reference_url https://access.redhat.com/errata/RHSA-2023:7540
reference_id RHSA-2023:7540
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7540
25
reference_url https://access.redhat.com/errata/RHSA-2023:7625
reference_id RHSA-2023:7625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7625
26
reference_url https://access.redhat.com/errata/RHSA-2023:7626
reference_id RHSA-2023:7626
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7626
27
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
28
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
29
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
30
reference_url https://access.redhat.com/errata/RHSA-2024:2101
reference_id RHSA-2024:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2101
31
reference_url https://usn.ubuntu.com/6429-1/
reference_id USN-6429-1
reference_type
scores
url https://usn.ubuntu.com/6429-1/
32
reference_url https://usn.ubuntu.com/6429-2/
reference_id USN-6429-2
reference_type
scores
url https://usn.ubuntu.com/6429-2/
33
reference_url https://usn.ubuntu.com/6429-3/
reference_id USN-6429-3
reference_type
scores
url https://usn.ubuntu.com/6429-3/
34
reference_url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
reference_id viewtopic.php?f=8&t=8868
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
fixed_packages
0
url pkg:generic/curl.se/curl@8.4.0
purl pkg:generic/curl.se/curl@8.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-85qb-zec7-subc
8
vulnerability VCID-bcuq-n4vb-k7f3
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-hhms-2hg6-nke9
15
vulnerability VCID-jnq1-hk6d-b3a3
16
vulnerability VCID-kq38-7s5x-nqaz
17
vulnerability VCID-p155-gbtu-abg1
18
vulnerability VCID-secz-78pt-dben
19
vulnerability VCID-u1p8-s8vm-3yer
20
vulnerability VCID-v82t-s9e1-2fbw
21
vulnerability VCID-w8ff-vxga-8qcz
22
vulnerability VCID-wgur-psum-pbck
23
vulnerability VCID-wmam-qmmg-6uay
24
vulnerability VCID-y41p-tgpa-m7cs
25
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.4.0
aliases CVE-2023-38546
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w472-84ep-fkdx
60
url VCID-w8ff-vxga-8qcz
vulnerability_id VCID-w8ff-vxga-8qcz
summary curl: curl: Information disclosure due to incorrect TLS connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4873.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4873.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-4873
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02591
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-4873
2
reference_url https://curl.se/docs/CVE-2026-4873.html
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T19:29:14Z/
url https://curl.se/docs/CVE-2026-4873.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4873
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3621851
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T19:29:14Z/
url https://hackerone.com/reports/3621851
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2461200
reference_id 2461200
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2461200
7
reference_url https://curl.se/docs/CVE-2026-4873.json
reference_id CVE-2026-4873.json
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-13T19:29:14Z/
url https://curl.se/docs/CVE-2026-4873.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:12916
reference_id RHSA-2026:12916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:12916
9
reference_url https://usn.ubuntu.com/8227-1/
reference_id USN-8227-1
reference_type
scores
url https://usn.ubuntu.com/8227-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.20.0
purl pkg:generic/curl.se/curl@8.20.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.20.0
aliases CVE-2026-4873
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w8ff-vxga-8qcz
61
url VCID-wbwx-5vg3-uqcd
vulnerability_id VCID-wbwx-5vg3-uqcd
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32206.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32206.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32206
reference_id
reference_type
scores
0
value 0.03367
scoring_system epss
scoring_elements 0.87599
published_at 2026-06-05T12:55:00Z
1
value 0.03367
scoring_system epss
scoring_elements 0.87578
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32206
2
reference_url https://curl.se/docs/CVE-2022-32206.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32206.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1570651
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://hackerone.com/reports/1570651
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099300
reference_id 2099300
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099300
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://www.openwall.com/lists/oss-security/2023/02/15/3
reference_id 3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://www.openwall.com/lists/oss-security/2023/02/15/3
23
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
24
reference_url https://security.archlinux.org/AVG-2817
reference_id AVG-2817
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2817
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
26
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://www.debian.org/security/2022/dsa-5197
27
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://security.gentoo.org/glsa/202212-01
28
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://support.apple.com/kb/HT213488
29
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
30
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
31
reference_url https://access.redhat.com/errata/RHSA-2022:6157
reference_id RHSA-2022:6157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6157
32
reference_url https://access.redhat.com/errata/RHSA-2022:6159
reference_id RHSA-2022:6159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6159
33
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
34
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
35
reference_url https://access.redhat.com/errata/RHSA-2023:3460
reference_id RHSA-2023:3460
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3460
36
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.84.0
purl pkg:generic/curl.se/curl@7.84.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6en5-etsd-2bce
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-85qb-zec7-subc
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k3nv-gf9b-5ua2
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kq38-7s5x-nqaz
29
vulnerability VCID-mpuf-pp6z-q3d6
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-u1p8-s8vm-3yer
39
vulnerability VCID-v82t-s9e1-2fbw
40
vulnerability VCID-w472-84ep-fkdx
41
vulnerability VCID-w8ff-vxga-8qcz
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-y41p-tgpa-m7cs
45
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.84.0
aliases CVE-2022-32206
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wbwx-5vg3-uqcd
62
url VCID-wmam-qmmg-6uay
vulnerability_id VCID-wmam-qmmg-6uay
summary This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46218.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46218.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-46218
reference_id
reference_type
scores
0
value 0.00219
scoring_system epss
scoring_elements 0.44593
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-46218
2
reference_url https://curl.se/docs/CVE-2023-46218.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://curl.se/docs/CVE-2023-46218.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2212193
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://hackerone.com/reports/2212193
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057646
reference_id 1057646
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057646
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2252030
reference_id 2252030
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2252030
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
reference_id 3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
9
reference_url https://www.debian.org/security/2023/dsa-5587
reference_id dsa-5587
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://www.debian.org/security/2023/dsa-5587
10
reference_url https://security.gentoo.org/glsa/202409-20
reference_id GLSA-202409-20
reference_type
scores
url https://security.gentoo.org/glsa/202409-20
11
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
reference_id msg00015.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
12
reference_url https://security.netapp.com/advisory/ntap-20240125-0007/
reference_id ntap-20240125-0007
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://security.netapp.com/advisory/ntap-20240125-0007/
13
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
14
reference_url https://access.redhat.com/errata/RHSA-2024:0434
reference_id RHSA-2024:0434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0434
15
reference_url https://access.redhat.com/errata/RHSA-2024:0452
reference_id RHSA-2024:0452
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0452
16
reference_url https://access.redhat.com/errata/RHSA-2024:0585
reference_id RHSA-2024:0585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0585
17
reference_url https://access.redhat.com/errata/RHSA-2024:1129
reference_id RHSA-2024:1129
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1129
18
reference_url https://access.redhat.com/errata/RHSA-2024:1316
reference_id RHSA-2024:1316
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1316
19
reference_url https://access.redhat.com/errata/RHSA-2024:1317
reference_id RHSA-2024:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1317
20
reference_url https://access.redhat.com/errata/RHSA-2024:1383
reference_id RHSA-2024:1383
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1383
21
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
22
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
23
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
24
reference_url https://access.redhat.com/errata/RHSA-2024:2094
reference_id RHSA-2024:2094
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2094
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
reference_id UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
26
reference_url https://usn.ubuntu.com/6535-1/
reference_id USN-6535-1
reference_type
scores
url https://usn.ubuntu.com/6535-1/
27
reference_url https://usn.ubuntu.com/6641-1/
reference_id USN-6641-1
reference_type
scores
url https://usn.ubuntu.com/6641-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.5.0
purl pkg:generic/curl.se/curl@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-bcuq-n4vb-k7f3
8
vulnerability VCID-bp56-gy66-mqae
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-ffmg-djmk-57hn
12
vulnerability VCID-g7ux-4vz2-ckfg
13
vulnerability VCID-gux4-dncg-h7a6
14
vulnerability VCID-h7v8-bg58-mkhu
15
vulnerability VCID-hhms-2hg6-nke9
16
vulnerability VCID-jnq1-hk6d-b3a3
17
vulnerability VCID-ke97-b9rb-5bfd
18
vulnerability VCID-kq38-7s5x-nqaz
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-u1p8-s8vm-3yer
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.5.0
aliases CVE-2023-46218
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wmam-qmmg-6uay
63
url VCID-xgj8-zrta-kub9
vulnerability_id VCID-xgj8-zrta-kub9
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32208.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32208.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32208
reference_id
reference_type
scores
0
value 0.0016
scoring_system epss
scoring_elements 0.36635
published_at 2026-06-04T12:55:00Z
1
value 0.0016
scoring_system epss
scoring_elements 0.36728
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32208
2
reference_url https://curl.se/docs/CVE-2022-32208.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32208.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1590071
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://hackerone.com/reports/1590071
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099306
reference_id 2099306
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099306
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
23
reference_url https://security.archlinux.org/AVG-2817
reference_id AVG-2817
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2817
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://support.apple.com/kb/HT213488
28
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
29
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
30
reference_url https://access.redhat.com/errata/RHSA-2022:6157
reference_id RHSA-2022:6157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6157
31
reference_url https://access.redhat.com/errata/RHSA-2022:6159
reference_id RHSA-2022:6159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6159
32
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
33
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
34
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
35
reference_url https://usn.ubuntu.com/5499-1/
reference_id USN-5499-1
reference_type
scores
url https://usn.ubuntu.com/5499-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.84.0
purl pkg:generic/curl.se/curl@7.84.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6en5-etsd-2bce
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-85qb-zec7-subc
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k3nv-gf9b-5ua2
27
vulnerability VCID-k5vr-1fmp-sqbw
28
vulnerability VCID-kq38-7s5x-nqaz
29
vulnerability VCID-mpuf-pp6z-q3d6
30
vulnerability VCID-ns58-vmsz-5ued
31
vulnerability VCID-nwvb-d466-4uaa
32
vulnerability VCID-p155-gbtu-abg1
33
vulnerability VCID-p97a-kjpp-f3d8
34
vulnerability VCID-r2g9-c896-rkge
35
vulnerability VCID-razg-yr7y-ukgd
36
vulnerability VCID-secz-78pt-dben
37
vulnerability VCID-sutv-qt2x-2yc7
38
vulnerability VCID-u1p8-s8vm-3yer
39
vulnerability VCID-v82t-s9e1-2fbw
40
vulnerability VCID-w472-84ep-fkdx
41
vulnerability VCID-w8ff-vxga-8qcz
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-y41p-tgpa-m7cs
45
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.84.0
aliases CVE-2022-32208
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xgj8-zrta-kub9
64
url VCID-y41p-tgpa-m7cs
vulnerability_id VCID-y41p-tgpa-m7cs
summary When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8096.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8096.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-8096
reference_id
reference_type
scores
0
value 0.00559
scoring_system epss
scoring_elements 0.68652
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-8096
2
reference_url https://curl.se/docs/CVE-2024-8096.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://curl.se/docs/CVE-2024-8096.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2669852
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://hackerone.com/reports/2669852
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2310519
reference_id 2310519
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2310519
7
reference_url https://curl.se/docs/CVE-2024-8096.json
reference_id CVE-2024-8096.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://curl.se/docs/CVE-2024-8096.json
8
reference_url https://usn.ubuntu.com/7012-1/
reference_id USN-7012-1
reference_type
scores
url https://usn.ubuntu.com/7012-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.10.0
purl pkg:generic/curl.se/curl@8.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dw3-33ju-jkbs
1
vulnerability VCID-21ff-tazv-9ud3
2
vulnerability VCID-39qh-jayw-g3dh
3
vulnerability VCID-3p2z-61gq-muhs
4
vulnerability VCID-5un8-xymy-37bt
5
vulnerability VCID-6ggz-pa5t-77c4
6
vulnerability VCID-7wqd-99h2-e7hk
7
vulnerability VCID-bcuq-n4vb-k7f3
8
vulnerability VCID-bp56-gy66-mqae
9
vulnerability VCID-f9nm-d5ax-qkcb
10
vulnerability VCID-fcb7-8163-muf4
11
vulnerability VCID-g7ux-4vz2-ckfg
12
vulnerability VCID-gux4-dncg-h7a6
13
vulnerability VCID-hhms-2hg6-nke9
14
vulnerability VCID-ns6z-wp2x-fkdq
15
vulnerability VCID-p155-gbtu-abg1
16
vulnerability VCID-secz-78pt-dben
17
vulnerability VCID-t45k-skv6-cfg2
18
vulnerability VCID-u1p8-s8vm-3yer
19
vulnerability VCID-v82t-s9e1-2fbw
20
vulnerability VCID-w8ff-vxga-8qcz
21
vulnerability VCID-wgur-psum-pbck
22
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.10.0
aliases CVE-2024-8096
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y41p-tgpa-m7cs
65
url VCID-y44u-23he-aya8
vulnerability_id VCID-y44u-23he-aya8
summary curl: curl: Unauthorized access due to improper HTTP proxy connection reuse
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-3784.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-3784
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07339
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-3784
2
reference_url https://curl.se/docs/CVE-2026-3784.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://curl.se/docs/CVE-2026-3784.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/3584903
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://hackerone.com/reports/3584903
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2446449
reference_id 2446449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2446449
7
reference_url https://curl.se/docs/CVE-2026-3784.json
reference_id CVE-2026-3784.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-11T15:48:38Z/
url https://curl.se/docs/CVE-2026-3784.json
8
reference_url https://access.redhat.com/errata/RHSA-2026:6893
reference_id RHSA-2026:6893
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:6893
9
reference_url https://usn.ubuntu.com/8084-1/
reference_id USN-8084-1
reference_type
scores
url https://usn.ubuntu.com/8084-1/
10
reference_url https://usn.ubuntu.com/8099-1/
reference_id USN-8099-1
reference_type
scores
url https://usn.ubuntu.com/8099-1/
fixed_packages
0
url pkg:generic/curl.se/curl@8.19.0
purl pkg:generic/curl.se/curl@8.19.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5un8-xymy-37bt
1
vulnerability VCID-9vbs-w124-q3au
2
vulnerability VCID-bcuq-n4vb-k7f3
3
vulnerability VCID-f9nm-d5ax-qkcb
4
vulnerability VCID-g7ux-4vz2-ckfg
5
vulnerability VCID-secz-78pt-dben
6
vulnerability VCID-w8ff-vxga-8qcz
7
vulnerability VCID-wgur-psum-pbck
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@8.19.0
aliases CVE-2026-3784
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y44u-23he-aya8
66
url VCID-yjtj-ydsg-u7ca
vulnerability_id VCID-yjtj-ydsg-u7ca
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27781.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27781.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27781
reference_id
reference_type
scores
0
value 0.00077
scoring_system epss
scoring_elements 0.23073
published_at 2026-06-04T12:55:00Z
1
value 0.00077
scoring_system epss
scoring_elements 0.23155
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27781
2
reference_url https://curl.se/docs/CVE-2022-27781.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27781.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1555441
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://hackerone.com/reports/1555441
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2082204
reference_id 2082204
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2082204
21
reference_url https://security.archlinux.org/AVG-2706
reference_id AVG-2706
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2706
22
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://www.debian.org/security/2022/dsa-5197
23
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://security.gentoo.org/glsa/202212-01
24
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
25
reference_url https://security.netapp.com/advisory/ntap-20220609-0009/
reference_id ntap-20220609-0009
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://security.netapp.com/advisory/ntap-20220609-0009/
26
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
27
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
28
reference_url https://usn.ubuntu.com/5412-1/
reference_id USN-5412-1
reference_type
scores
url https://usn.ubuntu.com/5412-1/
29
reference_url https://usn.ubuntu.com/5499-1/
reference_id USN-5499-1
reference_type
scores
url https://usn.ubuntu.com/5499-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.83.1
purl pkg:generic/curl.se/curl@7.83.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-3p2z-61gq-muhs
7
vulnerability VCID-5un8-xymy-37bt
8
vulnerability VCID-6en5-etsd-2bce
9
vulnerability VCID-6ggz-pa5t-77c4
10
vulnerability VCID-7wqd-99h2-e7hk
11
vulnerability VCID-7z3h-9pk3-rqct
12
vulnerability VCID-a8z6-bswu-jue8
13
vulnerability VCID-azcz-b8f2-63be
14
vulnerability VCID-bcuq-n4vb-k7f3
15
vulnerability VCID-bx2m-n5ft-3be8
16
vulnerability VCID-cdzf-3ydt-8bdk
17
vulnerability VCID-cfry-nx5h-kudv
18
vulnerability VCID-f9nm-d5ax-qkcb
19
vulnerability VCID-fcb7-8163-muf4
20
vulnerability VCID-g4n9-kg3s-pfcr
21
vulnerability VCID-g7ux-4vz2-ckfg
22
vulnerability VCID-gueb-wzpx-ufb2
23
vulnerability VCID-h4nw-va5b-23ef
24
vulnerability VCID-hhms-2hg6-nke9
25
vulnerability VCID-jnq1-hk6d-b3a3
26
vulnerability VCID-k5vr-1fmp-sqbw
27
vulnerability VCID-kq38-7s5x-nqaz
28
vulnerability VCID-ns58-vmsz-5ued
29
vulnerability VCID-nwvb-d466-4uaa
30
vulnerability VCID-p155-gbtu-abg1
31
vulnerability VCID-p97a-kjpp-f3d8
32
vulnerability VCID-r2g9-c896-rkge
33
vulnerability VCID-razg-yr7y-ukgd
34
vulnerability VCID-secz-78pt-dben
35
vulnerability VCID-sutv-qt2x-2yc7
36
vulnerability VCID-tzs5-qzhn-rqbk
37
vulnerability VCID-u1p8-s8vm-3yer
38
vulnerability VCID-v82t-s9e1-2fbw
39
vulnerability VCID-w472-84ep-fkdx
40
vulnerability VCID-w8ff-vxga-8qcz
41
vulnerability VCID-wbwx-5vg3-uqcd
42
vulnerability VCID-wgur-psum-pbck
43
vulnerability VCID-wmam-qmmg-6uay
44
vulnerability VCID-xgj8-zrta-kub9
45
vulnerability VCID-y41p-tgpa-m7cs
46
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.83.1
aliases CVE-2022-27781
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yjtj-ydsg-u7ca
67
url VCID-zg98-v6dj-s7gv
vulnerability_id VCID-zg98-v6dj-s7gv
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json
reference_id
reference_type
scores
0
value 3.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16842
reference_id
reference_type
scores
0
value 0.00162
scoring_system epss
scoring_elements 0.36945
published_at 2026-06-05T12:55:00Z
1
value 0.00162
scoring_system epss
scoring_elements 0.36852
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16842
2
reference_url https://curl.se/docs/CVE-2018-16842.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16842.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securitytracker.com/id/1042014
reference_id 1042014
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url http://www.securitytracker.com/id/1042014
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644124
reference_id 1644124
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644124
8
reference_url https://usn.ubuntu.com/3805-1/
reference_id 3805-1
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://usn.ubuntu.com/3805-1/
9
reference_url https://usn.ubuntu.com/3805-2/
reference_id 3805-2
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://usn.ubuntu.com/3805-2/
10
reference_url https://security.archlinux.org/ASA-201811-4
reference_id ASA-201811-4
reference_type
scores
url https://security.archlinux.org/ASA-201811-4
11
reference_url https://security.archlinux.org/AVG-795
reference_id AVG-795
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-795
12
reference_url https://curl.haxx.se/docs/CVE-2018-16842.html
reference_id CVE-2018-16842.html
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://curl.haxx.se/docs/CVE-2018-16842.html
13
reference_url https://github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211
reference_id d530e92f59ae9bb2d47066c3c460b25d2ffeb211
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211
14
reference_url https://www.debian.org/security/2018/dsa-4331
reference_id dsa-4331
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://www.debian.org/security/2018/dsa-4331
15
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://security.gentoo.org/glsa/201903-03
16
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
17
reference_url https://access.redhat.com/errata/RHSA-2019:2181
reference_id RHSA-2019:2181
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://access.redhat.com/errata/RHSA-2019:2181
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842
reference_id show_bug.cgi?id=CVE-2018-16842
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842
fixed_packages
0
url pkg:generic/curl.se/curl@7.62.0
purl pkg:generic/curl.se/curl@7.62.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1m1w-rayk-sffe
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-21ff-tazv-9ud3
6
vulnerability VCID-27bv-f11z-myak
7
vulnerability VCID-39qh-jayw-g3dh
8
vulnerability VCID-3ws4-1sak-r3ck
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-58p5-pfy3-xug1
11
vulnerability VCID-5un8-xymy-37bt
12
vulnerability VCID-738z-myg9-37hr
13
vulnerability VCID-7wqd-99h2-e7hk
14
vulnerability VCID-7yvu-s3p2-sfhc
15
vulnerability VCID-a58z-fu87-9ybs
16
vulnerability VCID-a8z6-bswu-jue8
17
vulnerability VCID-am31-t2h3-zbgw
18
vulnerability VCID-azcz-b8f2-63be
19
vulnerability VCID-bb6v-z8yg-6fe3
20
vulnerability VCID-bcuq-n4vb-k7f3
21
vulnerability VCID-bx2m-n5ft-3be8
22
vulnerability VCID-byzw-xw9s-pkga
23
vulnerability VCID-cdzf-3ydt-8bdk
24
vulnerability VCID-cfry-nx5h-kudv
25
vulnerability VCID-f7n8-zzhz-fuc8
26
vulnerability VCID-f9nm-d5ax-qkcb
27
vulnerability VCID-fcb7-8163-muf4
28
vulnerability VCID-fhc8-r8gv-bugj
29
vulnerability VCID-fp66-fzqt-6yg7
30
vulnerability VCID-g4n9-kg3s-pfcr
31
vulnerability VCID-g7ux-4vz2-ckfg
32
vulnerability VCID-gud1-yg9u-zyfp
33
vulnerability VCID-gueb-wzpx-ufb2
34
vulnerability VCID-h6xj-mys4-pucf
35
vulnerability VCID-hhms-2hg6-nke9
36
vulnerability VCID-j688-cyfg-p7gu
37
vulnerability VCID-jnq1-hk6d-b3a3
38
vulnerability VCID-kkrm-dj79-4ucj
39
vulnerability VCID-kq38-7s5x-nqaz
40
vulnerability VCID-msd2-35g9-nyd2
41
vulnerability VCID-p97a-kjpp-f3d8
42
vulnerability VCID-q46r-7nct-s3bw
43
vulnerability VCID-q8tg-prj1-y7b8
44
vulnerability VCID-qrnc-7ywu-37cz
45
vulnerability VCID-r2g9-c896-rkge
46
vulnerability VCID-secz-78pt-dben
47
vulnerability VCID-sutv-qt2x-2yc7
48
vulnerability VCID-tcxd-z7f3-kkes
49
vulnerability VCID-td39-d3tf-vkhc
50
vulnerability VCID-uj78-2cgz-zbdb
51
vulnerability VCID-v82t-s9e1-2fbw
52
vulnerability VCID-vpkr-9akj-hbf6
53
vulnerability VCID-w472-84ep-fkdx
54
vulnerability VCID-w8ff-vxga-8qcz
55
vulnerability VCID-wbwx-5vg3-uqcd
56
vulnerability VCID-wmam-qmmg-6uay
57
vulnerability VCID-xc5k-47n9-43d6
58
vulnerability VCID-xgj8-zrta-kub9
59
vulnerability VCID-y41p-tgpa-m7cs
60
vulnerability VCID-y44u-23he-aya8
61
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.62.0
aliases CVE-2018-16842
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zg98-v6dj-s7gv
Fixing_vulnerabilities
0
url VCID-7jrx-ykk8-h3gp
vulnerability_id VCID-7jrx-ykk8-h3gp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
reference_id
reference_type
scores
0
value 0.00735
scoring_system epss
scoring_elements 0.73207
published_at 2026-06-05T12:55:00Z
1
value 0.00735
scoring_system epss
scoring_elements 0.73169
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
2
reference_url https://curl.se/docs/CVE-2017-8817.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8817.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
1
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securityfocus.com/bid/102057
reference_id 102057
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securityfocus.com/bid/102057
7
reference_url http://www.securitytracker.com/id/1039897
reference_id 1039897
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securitytracker.com/id/1039897
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1515760
reference_id 1515760
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1515760
9
reference_url https://curl.haxx.se/docs/adv_2017-ae72.html
reference_id adv_2017-ae72.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://curl.haxx.se/docs/adv_2017-ae72.html
10
reference_url https://security.archlinux.org/ASA-201711-33
reference_id ASA-201711-33
reference_type
scores
url https://security.archlinux.org/ASA-201711-33
11
reference_url https://security.archlinux.org/ASA-201711-34
reference_id ASA-201711-34
reference_type
scores
url https://security.archlinux.org/ASA-201711-34
12
reference_url https://security.archlinux.org/ASA-201711-35
reference_id ASA-201711-35
reference_type
scores
url https://security.archlinux.org/ASA-201711-35
13
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
14
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
15
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
16
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
17
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
18
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
19
reference_url https://security.archlinux.org/AVG-524
reference_id AVG-524
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-524
20
reference_url https://security.archlinux.org/AVG-525
reference_id AVG-525
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-525
21
reference_url https://security.archlinux.org/AVG-526
reference_id AVG-526
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-526
22
reference_url http://security.cucumberlinux.com/security/details.php?id=162
reference_id details.php?id=162
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://security.cucumberlinux.com/security/details.php?id=162
23
reference_url https://www.debian.org/security/2017/dsa-4051
reference_id dsa-4051
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://www.debian.org/security/2017/dsa-4051
24
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://security.gentoo.org/glsa/201712-04
25
reference_url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
reference_id msg00040.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
26
reference_url https://usn.ubuntu.com/3498-1/
reference_id USN-3498-1
reference_type
scores
url https://usn.ubuntu.com/3498-1/
27
reference_url https://usn.ubuntu.com/3498-2/
reference_id USN-3498-2
reference_type
scores
url https://usn.ubuntu.com/3498-2/
fixed_packages
0
url pkg:generic/curl.se/curl@7.57.0
purl pkg:generic/curl.se/curl@7.57.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p8vk-yf66-wbb7
45
vulnerability VCID-p97a-kjpp-f3d8
46
vulnerability VCID-q46r-7nct-s3bw
47
vulnerability VCID-q8tg-prj1-y7b8
48
vulnerability VCID-qrnc-7ywu-37cz
49
vulnerability VCID-r2g9-c896-rkge
50
vulnerability VCID-raxd-4nxj-gkhp
51
vulnerability VCID-rt5e-saz2-j7c9
52
vulnerability VCID-secz-78pt-dben
53
vulnerability VCID-sutv-qt2x-2yc7
54
vulnerability VCID-tcxd-z7f3-kkes
55
vulnerability VCID-td39-d3tf-vkhc
56
vulnerability VCID-tn33-re3r-yfhw
57
vulnerability VCID-uj78-2cgz-zbdb
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.57.0
aliases CVE-2017-8817
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7jrx-ykk8-h3gp
1
url VCID-dj48-3dkt-dbdh
vulnerability_id VCID-dj48-3dkt-dbdh
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
reference_id
reference_type
scores
0
value 0.00825
scoring_system epss
scoring_elements 0.74852
published_at 2026-06-05T12:55:00Z
1
value 0.00825
scoring_system epss
scoring_elements 0.74821
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
2
reference_url https://curl.se/docs/CVE-2017-8818.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8818.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1517691
reference_id 1517691
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1517691
5
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
6
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
7
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
8
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
9
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
10
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
11
reference_url https://security.archlinux.org/AVG-527
reference_id AVG-527
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-527
12
reference_url https://security.archlinux.org/AVG-528
reference_id AVG-528
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-528
13
reference_url https://security.archlinux.org/AVG-529
reference_id AVG-529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-529
14
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
url https://security.gentoo.org/glsa/201712-04
fixed_packages
0
url pkg:generic/curl.se/curl@7.57.0
purl pkg:generic/curl.se/curl@7.57.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p8vk-yf66-wbb7
45
vulnerability VCID-p97a-kjpp-f3d8
46
vulnerability VCID-q46r-7nct-s3bw
47
vulnerability VCID-q8tg-prj1-y7b8
48
vulnerability VCID-qrnc-7ywu-37cz
49
vulnerability VCID-r2g9-c896-rkge
50
vulnerability VCID-raxd-4nxj-gkhp
51
vulnerability VCID-rt5e-saz2-j7c9
52
vulnerability VCID-secz-78pt-dben
53
vulnerability VCID-sutv-qt2x-2yc7
54
vulnerability VCID-tcxd-z7f3-kkes
55
vulnerability VCID-td39-d3tf-vkhc
56
vulnerability VCID-tn33-re3r-yfhw
57
vulnerability VCID-uj78-2cgz-zbdb
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.57.0
aliases CVE-2017-8818
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dj48-3dkt-dbdh
2
url VCID-f8vu-23bb-5ue7
vulnerability_id VCID-f8vu-23bb-5ue7
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8816
reference_id
reference_type
scores
0
value 0.00454
scoring_system epss
scoring_elements 0.64191
published_at 2026-06-05T12:55:00Z
1
value 0.00454
scoring_system epss
scoring_elements 0.64147
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8816
2
reference_url https://curl.se/docs/CVE-2017-8816.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8816.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securityfocus.com/bid/101998
reference_id 101998
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securityfocus.com/bid/101998
7
reference_url http://www.securitytracker.com/id/1039896
reference_id 1039896
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securitytracker.com/id/1039896
8
reference_url http://www.securitytracker.com/id/1040608
reference_id 1040608
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securitytracker.com/id/1040608
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1515757
reference_id 1515757
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1515757
10
reference_url https://curl.haxx.se/docs/adv_2017-12e7.html
reference_id adv_2017-12e7.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://curl.haxx.se/docs/adv_2017-12e7.html
11
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
12
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
13
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
14
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
15
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
16
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
17
reference_url https://security.archlinux.org/AVG-527
reference_id AVG-527
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-527
18
reference_url https://security.archlinux.org/AVG-528
reference_id AVG-528
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-528
19
reference_url https://security.archlinux.org/AVG-529
reference_id AVG-529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-529
20
reference_url http://security.cucumberlinux.com/security/details.php?id=161
reference_id details.php?id=161
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://security.cucumberlinux.com/security/details.php?id=161
21
reference_url https://www.debian.org/security/2017/dsa-4051
reference_id dsa-4051
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://www.debian.org/security/2017/dsa-4051
22
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://security.gentoo.org/glsa/201712-04
23
reference_url https://usn.ubuntu.com/3498-1/
reference_id USN-3498-1
reference_type
scores
url https://usn.ubuntu.com/3498-1/
fixed_packages
0
url pkg:generic/curl.se/curl@7.57.0
purl pkg:generic/curl.se/curl@7.57.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1a1k-d4ez-ybdu
2
vulnerability VCID-1dw3-33ju-jkbs
3
vulnerability VCID-1kpz-55f1-f7dj
4
vulnerability VCID-1m1w-rayk-sffe
5
vulnerability VCID-1zsv-4jdy-63en
6
vulnerability VCID-21ff-tazv-9ud3
7
vulnerability VCID-27bv-f11z-myak
8
vulnerability VCID-39qh-jayw-g3dh
9
vulnerability VCID-3ws4-1sak-r3ck
10
vulnerability VCID-4hha-2z31-2bf8
11
vulnerability VCID-4zcd-rbx3-qye5
12
vulnerability VCID-58p5-pfy3-xug1
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5un8-xymy-37bt
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-738z-myg9-37hr
17
vulnerability VCID-7wqd-99h2-e7hk
18
vulnerability VCID-7yvu-s3p2-sfhc
19
vulnerability VCID-a58z-fu87-9ybs
20
vulnerability VCID-a8z6-bswu-jue8
21
vulnerability VCID-am31-t2h3-zbgw
22
vulnerability VCID-azcz-b8f2-63be
23
vulnerability VCID-bb6v-z8yg-6fe3
24
vulnerability VCID-bcuq-n4vb-k7f3
25
vulnerability VCID-bx2m-n5ft-3be8
26
vulnerability VCID-cdzf-3ydt-8bdk
27
vulnerability VCID-cfry-nx5h-kudv
28
vulnerability VCID-f7n8-zzhz-fuc8
29
vulnerability VCID-f9nm-d5ax-qkcb
30
vulnerability VCID-fhc8-r8gv-bugj
31
vulnerability VCID-g4n9-kg3s-pfcr
32
vulnerability VCID-g7ux-4vz2-ckfg
33
vulnerability VCID-gud1-yg9u-zyfp
34
vulnerability VCID-gueb-wzpx-ufb2
35
vulnerability VCID-h6xj-mys4-pucf
36
vulnerability VCID-hhms-2hg6-nke9
37
vulnerability VCID-j688-cyfg-p7gu
38
vulnerability VCID-jnq1-hk6d-b3a3
39
vulnerability VCID-kae8-wmf2-2kf1
40
vulnerability VCID-kkrm-dj79-4ucj
41
vulnerability VCID-kq38-7s5x-nqaz
42
vulnerability VCID-msd2-35g9-nyd2
43
vulnerability VCID-p7mn-a632-c3ag
44
vulnerability VCID-p8vk-yf66-wbb7
45
vulnerability VCID-p97a-kjpp-f3d8
46
vulnerability VCID-q46r-7nct-s3bw
47
vulnerability VCID-q8tg-prj1-y7b8
48
vulnerability VCID-qrnc-7ywu-37cz
49
vulnerability VCID-r2g9-c896-rkge
50
vulnerability VCID-raxd-4nxj-gkhp
51
vulnerability VCID-rt5e-saz2-j7c9
52
vulnerability VCID-secz-78pt-dben
53
vulnerability VCID-sutv-qt2x-2yc7
54
vulnerability VCID-tcxd-z7f3-kkes
55
vulnerability VCID-td39-d3tf-vkhc
56
vulnerability VCID-tn33-re3r-yfhw
57
vulnerability VCID-uj78-2cgz-zbdb
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-w8ff-vxga-8qcz
61
vulnerability VCID-wbwx-5vg3-uqcd
62
vulnerability VCID-wmam-qmmg-6uay
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-y44u-23he-aya8
66
vulnerability VCID-yjtj-ydsg-u7ca
67
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.57.0
aliases CVE-2017-8816
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f8vu-23bb-5ue7
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:generic/curl.se/curl@7.57.0