Lucene search
GoogleOSV:USN-5788-1HistoryJan 05, 2023 - 5:15 p.m.
curl vulnerabilities
2023-01-0517:15:18
Google
osv.dev
4
Hiroki Kurosawa discovered that curl incorrectly handled HSTS support
when certain hostnames included IDN characters. A remote attacker could
possibly use this issue to cause curl to use unencrypted connections. This
issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-43551)
It was discovered that curl incorrectly handled denials when using HTTP
proxies. A remote attacker could use this issue to cause curl to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2022-43552)
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4597-1)
2022-12-22 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1571)
2023-03-23 00:00:00
Mageia: Security Advisory (MGASA-2022-0483)
2023-01-02 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2023-01-05 00:00:00
curl vulnerabilities
2023-02-27 00:00:00
nessus
nessus
Fedora 36 : curl (2022-9836111c44)
2022-12-28 00:00:00
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2022:4597-1)
2022-12-22 00:00:00
Amazon Linux 2022 : (ALAS2022-2023-276)
2023-01-25 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2022-12-31 01:39:00
cloudfoundry
cloudfoundry
USN-5788-1: curl vulnerabilities | Cloud Foundry
2023-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-12.fc36
2022-12-28 01:40:29
[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37
2022-12-26 01:06:29
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2022-0304
2022-12-21 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0508
2022-12-22 00:00:00
Important Photon OS Security Update - PHSA-2022-0551
2022-12-21 00:00:00
amazon
amazon
Medium: curl
2023-01-30 16:02:00
Medium: curl
2023-04-13 19:01:00
cbl_mariner
cbl_mariner
CVE-2022-43551 affecting package cmake for versions less than 3.21.4-3
2023-02-14 20:20:58
CVE-2022-43551 affecting package curl 7.86.0-1
2023-01-29 21:01:57
CVE-2022-43551 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
osv
osv
CVE-2022-43551
2022-12-23 15:15:15
CVE-2022-43552
2023-02-09 20:15:10
Low: curl security update
2023-05-09 00:00:00
debiancve
debiancve
CVE-2022-43551
2022-12-23 15:15:00
CVE-2022-43552
2023-02-09 20:15:00
redos
redos
ROS-20230414-03
2023-04-14 00:00:00
ROS-20230414-04
2023-04-14 00:00:00
broadcom
broadcom
f5
f5
K000132697 : Curl vulnerability CVE-2022-43551
2023-02-21 00:00:00
K000133092 : cURL vulnerability CVE-2022-43552
2023-03-21 00:00:00
cgr
cgr
CVE-2022-43551 vulnerabilities
2024-05-19 03:07:16
CVE-2022-43552 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2022-43551
2022-12-21 09:36:35
CVE-2022-43552
2022-12-21 09:36:44
alpinelinux
alpinelinux
CVE-2022-43551
2022-12-23 15:15:00
CVE-2022-43552
2023-02-09 20:15:00
ubuntucve
ubuntucve
CVE-2022-43551
2022-12-21 00:00:00
CVE-2022-43552
2022-12-21 00:00:00
hackerone
hackerone
Internet Bug Bounty: CVE-2022-43551: Another HSTS bypass via IDN
2022-12-21 08:51:43
curl: CVE-2022-43552: HTTP Proxy deny use-after-free
2022-11-07 16:45:50
curl: CVE-2022-43551: Another HSTS bypass via IDN
2022-10-29 16:45:01
prion
prion
Design/Logic Flaw
2022-12-23 15:15:00
Path traversal
2023-02-09 20:15:00
veracode
veracode
Information Disclosure
2022-12-23 19:14:53
Use-After-Free
2022-12-23 19:14:50
wolfi
wolfi
CVE-2022-43551 vulnerabilities
2024-05-19 21:07:16
CVE-2022-43552 vulnerabilities
2024-05-19 21:07:16
cve
cve
CVE-2022-43551
2022-12-23 15:15:00
CVE-2022-43552
2023-02-09 20:15:00
cvelist
cvelist
CVE-2022-43551
2022-12-23 00:00:00
CVE-2022-43552
2023-02-09 00:00:00
kaspersky
kaspersky
KLA48563 ACE vulnerability in Microsoft Mariner
2023-02-10 00:00:00
KLA48562 ACE vulnerability in Microsoft Windows
2023-02-10 00:00:00
redhat
redhat
(RHSA-2023:7743) Low: curl security update
2023-12-12 16:01:33
(RHSA-2023:2478) Low: curl security update
2023-05-09 05:11:57
(RHSA-2023:2963) Low: curl security and bug fix update
2023-05-16 05:59:21
centos
centos
curl, libcurl security update
2024-01-12 19:12:33
oraclelinux
oraclelinux
curl security update
2023-12-12 00:00:00
curl security and bug fix update
2023-05-24 00:00:00
curl security update
2023-05-15 00:00:00
mscve
mscve
Open Source Curl Remote Code Execution Vulnerability
2023-02-10 00:00:00
almalinux
almalinux
Low: curl security and bug fix update
2023-05-16 00:00:00
Low: curl security update
2023-05-09 00:00:00
ics
ics
Siemens SINEC NMS Third-Party
2023-05-11 12:00:00
debian
debian
[SECURITY] [DSA 5330-1] curl security update
2023-01-27 17:54:20
[SECURITY] [DLA 3288-1] curl security update
2023-01-28 21:20:10
aix
aix
Multiple vulnerabilities cURL libcurl affect AIX
2023-06-29 09:35:59
rosalinux
rosalinux
Advisory ROSA-SA-2023-2221
2023-08-22 13:21:47
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00
apple
apple
About the security content of macOS Ventura 13.3
2023-03-27 00:00:00