Search for packages
| purl | pkg:rpm/redhat/curl@7.61.1-22.el8_6?arch=12 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 2.6 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2xmp-jc8v-bucb
Aliases: CVE-2022-35252 |
Multiple vulnerabilities have been found in curl, the worst of which could result in arbitrary code execution. | There are no reported fixed by versions. |
|
VCID-9ggp-5wfj-ufcq
Aliases: CVE-2022-43552 |
Multiple vulnerabilities have been discovered in curl, the worst of which could result in arbitrary code execution. | There are no reported fixed by versions. |
|
VCID-cbah-e86c-w3fj
Aliases: CVE-2023-27535 |
Improper Authentication An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information. | There are no reported fixed by versions. |
|
VCID-ms2r-94ph-yyh3
Aliases: CVE-2023-27536 |
Improper Authentication An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed. | There are no reported fixed by versions. |
|
VCID-qdcn-2u3v-b3cv
Aliases: CVE-2023-46218 |
Multiple vulnerabilities have been discovered in curl, the worst of which could lead to information disclosure. | There are no reported fixed by versions. |
|
VCID-s73y-y7v7-43cm
Aliases: CVE-2023-28322 |
Multiple vulnerabilities have been discovered in curl, the worst of which could result in arbitrary code execution. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||