Lucene search
Gentoo FoundationGLSA-202310-12HistoryOct 11, 2023 - 12:00 a.m.
curl: Multiple Vulnerabilities
2023-10-1100:00:00
Gentoo Foundation
security.gentoo.org
23
curl
vulnerabilities
remote code execution
socks usage
0.009 Low
EPSS
Percentile
82.9%
Background
A command line tool and library for transferring data with URLs.
Description
Multiple vulnerabilities have been discovered in curl. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details. Note that the risk of remote code execution is limited to SOCKS usage.
Workaround
There is no known workaround at this time.
Resolution
All curl users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/curl-8.3.0-r2"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-misc/curl | < 8.3.0-r2 | UNKNOWN |
Related
nessus
nessus
GLSA-202310-12 : curl: Multiple Vulnerabilities
2023-10-11 00:00:00
SUSE SLES15 Security Update : curl (SUSE-SU-2023:2226-1)
2023-05-18 00:00:00
SUSE SLES12 Security Update : curl (SUSE-SU-2023:2228-1)
2023-05-18 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0263)
2023-09-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2226-1)
2023-05-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2228-1)
2023-05-18 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2023-09-25 01:16:18
Updated curl packages fix security vulnerability
2022-12-31 01:39:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 38 Update: curl-7.87.0-7.fc38
2023-03-29 00:19:18
[SECURITY] Fedora 37 Update: curl-7.85.0-8.fc37
2023-03-27 02:01:30
[SECURITY] Fedora 36 Update: curl-7.82.0-14.fc36
2023-04-09 01:41:25
freebsd
freebsd
curl -- multiple vulnerabilities
2023-03-20 00:00:00
curl -- multiple vulnerabilities
2023-03-21 00:00:00
curl -- multiple vulnerabilities
2023-02-15 00:00:00
slackware
slackware
[slackware-security] curl
2023-03-20 19:35:43
[slackware-security] curl
2023-05-17 21:00:11
[slackware-security] curl
2023-02-15 19:51:33
amazon
amazon
aix
aix
Multiple vulnerabilities cURL libcurl affect AIX
2023-06-29 09:35:59
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0589
2023-05-31 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0371
2023-04-06 00:00:00
cloudfoundry
cloudfoundry
USN-5964-1: curl vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
USN-5891-1: curl vulnerabilities | Cloud Foundry
2023-04-20 00:00:00
USN-6237-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2023-03-20 00:00:00
curl regression
2023-07-19 00:00:00
curl vulnerabilities
2023-09-11 00:00:00
osv
osv
curl vulnerabilities
2023-03-20 12:30:11
Moderate: curl security update
2023-11-07 00:00:00
curl - security update
2023-04-21 00:00:00
redos
redos
ROS-20230407-01
2023-04-07 00:00:00
ROS-20230621-04
2023-06-21 00:00:00
ROS-20230406-01
2023-04-06 00:00:00
oraclelinux
oraclelinux
curl security update
2023-11-11 00:00:00
curl security update
2023-10-18 00:00:00
curl security update
2023-11-16 00:00:00
almalinux
almalinux
Moderate: curl security update
2023-11-07 00:00:00
redhat
redhat
(RHSA-2023:6679) Moderate: curl security update
2023-11-07 06:11:52
(RHSA-2024:0428) Moderate: curl security and bug fix update
2024-01-24 14:40:32
debian
debian
[SECURITY] [DLA 3398-1] curl security update
2023-04-21 20:05:07
cloudlinux
cloudlinux
curl: Fix of 3 CVEs
2023-04-14 16:45:12
rosalinux
rosalinux
Advisory ROSA-SA-2023-2221
2023-08-22 13:21:47
hackerone
hackerone
curl: CVE-2023-23916: HTTP multi-header compression denial of service
2023-01-08 12:34:31
ubuntucve
ubuntucve
CVE-2023-23915
2023-02-15 00:00:00
kaspersky
kaspersky
KLA61541 Multiple vulnerabilities in Microsoft Windows
2023-10-19 00:00:00
thn
thn
Security Patch for Two New Flaws in Curl Library Arriving on October 11
2023-10-09 10:32:00