Lucene search
CentOS ProjectCESA-2023:7743HistoryJan 12, 2024 - 7:12 p.m.
curl, libcurl security update
2024-01-1219:12:33
CentOS Project
lists.centos.org
47
centos
errata
security advisory
http
ftp
ldap
cve-2022-43552
merged bulletin
affected packages
red hat
vulnerability
CentOS Errata and Security Advisory CESA-2023:7743
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
- curl: Use-after-free triggered by an HTTP proxy deny response (CVE-2022-43552)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2024-January/099177.html
Affected packages:
curl
libcurl
libcurl-devel
Upstream details at:
https://access.redhat.com/errata/RHSA-2023:7743
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 7 | x86_64 | curl | < 7.29.0-59.el7_9.2 | curl-7.29.0-59.el7_9.2.x86_64.rpm |
| CentOS | 7 | i686 | libcurl | < 7.29.0-59.el7_9.2 | libcurl-7.29.0-59.el7_9.2.i686.rpm |
| CentOS | 7 | x86_64 | libcurl | < 7.29.0-59.el7_9.2 | libcurl-7.29.0-59.el7_9.2.x86_64.rpm |
| CentOS | 7 | i686 | libcurl-devel | < 7.29.0-59.el7_9.2 | libcurl-devel-7.29.0-59.el7_9.2.i686.rpm |
| CentOS | 7 | x86_64 | libcurl-devel | < 7.29.0-59.el7_9.2 | libcurl-devel-7.29.0-59.el7_9.2.x86_64.rpm |
Related
ibm
ibm
redos
redos
ROS-20230414-04
2023-04-14 00:00:00
nessus
nessus
CentOS 9 : curl-7.76.1-22.el9
2024-02-29 00:00:00
EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-1522)
2023-03-19 00:00:00
CentOS 7 : curl (RHSA-2023:7743)
2023-12-22 00:00:00
openvas
openvas
CentOS: Security Advisory for curl (CESA-2023:7743)
2024-03-05 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1547)
2023-03-20 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2139)
2023-06-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-43552 affecting package cmake for versions less than 3.28.2-1
2024-03-19 17:21:46
CVE-2022-43552 affecting package mysql for versions less than 8.0.33-1
2023-05-03 16:24:32
CVE-2022-43552 affecting package curl 7.86.0-2
2023-03-02 04:18:33
kaspersky
kaspersky
KLA48563 ACE vulnerability in Microsoft Mariner
2023-02-10 00:00:00
KLA48562 ACE vulnerability in Microsoft Windows
2023-02-10 00:00:00
wolfi
wolfi
CVE-2022-43552 vulnerabilities
2024-05-19 21:07:16
redhat
redhat
(RHSA-2023:7743) Low: curl security update
2023-12-12 16:01:33
(RHSA-2023:2478) Low: curl security update
2023-05-09 05:11:57
(RHSA-2023:2963) Low: curl security and bug fix update
2023-05-16 05:59:21
osv
osv
CVE-2022-43552
2023-02-09 20:15:10
curl vulnerabilities
2023-01-05 17:15:18
Low: curl security update
2023-05-09 00:00:00
ubuntucve
ubuntucve
CVE-2022-43552
2022-12-21 00:00:00
cgr
cgr
CVE-2022-43552 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2022-43552
2023-02-09 20:15:00
debiancve
debiancve
CVE-2022-43552
2023-02-09 20:15:00
cvelist
cvelist
CVE-2022-43552
2023-02-09 00:00:00
f5
f5
K000133092 : cURL vulnerability CVE-2022-43552
2023-03-21 00:00:00
veracode
veracode
Use-After-Free
2022-12-23 19:14:50
oraclelinux
oraclelinux
curl security update
2023-12-12 00:00:00
curl security and bug fix update
2023-05-24 00:00:00
curl security update
2023-05-15 00:00:00
mscve
mscve
Open Source Curl Remote Code Execution Vulnerability
2023-02-10 00:00:00
cve
cve
CVE-2022-43552
2023-02-09 20:15:00
hackerone
hackerone
curl: CVE-2022-43552: HTTP Proxy deny use-after-free
2022-11-07 16:45:50
prion
prion
Path traversal
2023-02-09 20:15:00
redhatcve
redhatcve
CVE-2022-43552
2022-12-21 09:36:44
ubuntu
ubuntu
curl vulnerabilities
2023-01-05 00:00:00
curl vulnerabilities
2023-02-27 00:00:00
almalinux
almalinux
Low: curl security and bug fix update
2023-05-16 00:00:00
Low: curl security update
2023-05-09 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2022-12-31 01:39:00
cloudfoundry
cloudfoundry
USN-5788-1: curl vulnerabilities | Cloud Foundry
2023-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-12.fc36
2022-12-28 01:40:29
[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37
2022-12-26 01:06:29
photon
photon
Important Photon OS Security Update - PHSA-2022-0304
2022-12-21 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0508
2022-12-22 00:00:00
Important Photon OS Security Update - PHSA-2022-0551
2022-12-21 00:00:00
debian
debian
[SECURITY] [DSA 5330-1] curl security update
2023-01-27 17:54:20
[SECURITY] [DLA 3288-1] curl security update
2023-01-28 21:20:10
amazon
amazon
Medium: curl
2023-01-30 16:02:00
Medium: curl
2023-04-13 19:01:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2221
2023-08-22 13:21:47
ics
ics
Siemens SINEC NMS Third-Party
2023-05-11 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
aix
aix
Multiple vulnerabilities cURL libcurl affect AIX
2023-06-29 09:35:59
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00
mskb
mskb
April 11, 2023—KB5025224 (OS Build 22000.1817)
2023-04-11 07:00:00
April 11, 2023—KB5025221 (OS Builds 19042.2846, 19044.2846, and 19045.2846)
2023-04-11 07:00:00
April 11, 2023—KB5025239 (OS Build 22621.1555)
2023-04-11 07:00:00
apple
apple
About the security content of macOS Ventura 13.3
2023-03-27 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
avleonov
avleonov