Lucene search

K
osvGoogleOSV:USN-5499-1
HistoryJul 01, 2022 - 2:04 a.m.

curl vulnerabilities

2022-07-0102:04:04
Google
osv.dev
5

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

Florian Kohnhuser discovered that curl incorrectly handled returning a
TLS server’s certificate chain details. A remote attacker could possibly
use this issue to cause curl to stop responding, resulting in a denial of
service. (CVE-2022-27781)

Harry Sintonen discovered that curl incorrectly handled certain FTP-KRB
messages. An attacker could possibly use this to perform a
machine-in-the-middle attack. (CVE-2022-32208)