Lucene search
GoogleOSV:USN-5891-1HistoryFeb 27, 2023 - 12:34 p.m.
curl vulnerabilities
2023-02-2712:34:20
Google
osv.dev
1
Harry Sintonen discovered that curl incorrectly handled HSTS support
when multiple URLs are requested serially. A remote attacker could possibly
use this issue to cause curl to use unencrypted connections. This issue
only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-23914)
Harry Sintonen discovered that curl incorrectly handled HSTS support
when multiple URLs are requested in parallel. A remote attacker could
possibly use this issue to cause curl to use unencrypted connections. This
issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2023-23915)
Patrick Monnerat discovered that curl incorrectly handled memory when
processing requests with multi-header compression. A remote attacker could
possibly use this issue to cause curl to consume resources, leading to a
denial of service. (CVE-2023-23916)
Related
nessus
nessus
FreeBSD : curl -- multiple vulnerabilities (be233fc6-bae7-11ed-a4fb-080027f5fec9)
2023-03-05 00:00:00
Fedora 37 : curl (2023-ddf6575695)
2023-02-19 00:00:00
EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-2286)
2023-07-04 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: curl-7.85.0-6.fc37
2023-02-19 01:39:34
[SECURITY] Fedora 36 Update: curl-7.82.0-13.fc36
2023-02-28 02:02:43
freebsd
freebsd
curl -- multiple vulnerabilities
2023-02-15 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2262)
2023-07-04 00:00:00
Fedora: Security Advisory for curl (FEDORA-2023-ddf6575695)
2023-02-19 00:00:00
Ubuntu: Security Advisory (USN-5891-1)
2023-02-28 00:00:00
slackware
slackware
[slackware-security] curl
2023-02-15 19:51:33
amazon
amazon
Medium: curl
2023-03-02 22:36:00
Medium: curl
2023-04-13 19:01:00
cloudfoundry
cloudfoundry
USN-5891-1: curl vulnerabilities | Cloud Foundry
2023-04-20 00:00:00
hackerone
hackerone
curl: CVE-2023-23916: HTTP multi-header compression denial of service
2023-01-08 12:34:31
Internet Bug Bounty: CVE-2023-23915: HSTS amnesia with --parallel
2023-02-15 09:14:11
curl: CVE-2023-23915: HSTS amnesia with --parallel
2022-12-21 12:48:23
ubuntucve
ubuntucve
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0350
2023-03-07 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0545
2023-03-07 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
veracode
veracode
Information Disclosure
2023-02-18 05:20:51
Information Disclosure
2023-02-18 05:22:50
Denial Of Service (DoS)
2023-02-18 05:23:01
debiancve
debiancve
f5
f5
K000136153 : cURL vulnerability CVE-2023-23914
2023-09-11 00:00:00
prion
prion
Design/Logic Flaw
2023-02-23 20:15:00
Design/Logic Flaw
2023-02-23 20:15:00
Design/Logic Flaw
2023-02-23 20:15:00
cve
cve
redhatcve
redhatcve
cbl_mariner
cbl_mariner
CVE-2023-23914 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
CVE-2023-23914 affecting package curl for versions less than 7.88.1-1
2023-03-24 23:55:40
CVE-2023-23915 affecting package mysql for versions less than 8.0.33-1
2023-05-03 16:24:32
osv
osv
cvelist
cvelist
alpinelinux
alpinelinux
ibm
ibm
Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments
2023-05-16 22:43:50
Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management
2023-06-16 19:25:04
Security Bulletin: A vulnerability in libcURL affect IBM Rational ClearCase.
2023-10-03 14:06:51
redos
redos
ROS-20230417-05
2023-04-17 00:00:00
almalinux
almalinux
Moderate: curl security update
2023-03-07 00:00:00
Moderate: curl security update
2023-04-11 00:00:00
oraclelinux
oraclelinux
curl security update
2023-04-11 00:00:00
curl security update
2023-03-07 00:00:00
rocky
rocky
curl security update
2023-03-08 16:37:30
redhat
redhat
(RHSA-2023:1140) Moderate: curl security update
2023-03-07 13:28:28
(RHSA-2023:1842) Moderate: curl security update
2023-04-18 16:09:24
(RHSA-2023:1701) Moderate: curl security update
2023-04-11 13:44:27
mageia
mageia
Updated curl packages fix security vulnerability
2023-02-21 00:25:36
debian
debian
[SECURITY] [DSA 5365-1] curl security update
2023-02-27 22:00:09
gentoo
gentoo
curl: Multiple Vulnerabilities
2023-10-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2221
2023-08-22 13:21:47
ics
ics
Hitachi Energy MSM
2023-05-09 12:00:00
aix
aix
Multiple vulnerabilities cURL libcurl affect AIX
2023-06-29 09:35:59