Known vulnerabilities in curl (Ubuntu package) - page 3

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 94
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl (Ubuntu package) curl (Ubuntu package) is affected by 94 known vulnerabilities: 2 high, 53 medium, 38 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97150 - Improper Certificate Validation
CVE-2024-8096
CWE-295 Low
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.24, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.18, 8.5.0-2ubuntu10.4, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.23, 7.81.0-1ubuntu1.17, 8.5.0-2ubuntu10.2 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398
CWE-772 Medium
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16, 8.2.1-1ubuntu3.3, 8.5.0-2ubuntu10.1 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16, 8.2.1-1ubuntu3.3, 8.5.0-2ubuntu10.1 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.21, 7.81.0-1ubuntu1.15, 7.88.1-8ubuntu2.4, 8.2.1-1ubuntu3.2 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219
CWE-311 Medium
No
No
7.68.0-1ubuntu2.21, 7.81.0-1ubuntu1.15, 7.88.1-8ubuntu2.4, 8.2.1-1ubuntu3.2 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545
CWE-122 High
Available
No
7.68.0-1ubuntu2.20, 7.81.0-1ubuntu1.14, 7.88.1-8ubuntu2.3, 8.2.1-1ubuntu3.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546
CWE-73 Low
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.20, 7.81.0-1ubuntu1.14, 7.88.1-8ubuntu2.3, 8.2.1-1ubuntu3.1 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80732 - Resource exhaustion
CVE-2023-38039
CWE-400 Medium
No
No
7.88.1-8ubuntu2.2 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.19, 7.81.0-1ubuntu1.11, 7.81.0-1ubuntu1.13, 7.85.0-1ubuntu0.6, 7.88.1-8ubuntu2.1 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.19, 7.81.0-1ubuntu1.11, 7.81.0-1ubuntu1.13, 7.85.0-1ubuntu0.6, 7.88.1-8ubuntu2.1 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
Ubuntu Pro (Infra-only), 7.68.0-1ubuntu2.19, 7.81.0-1ubuntu1.11, 7.81.0-1ubuntu1.13, 7.85.0-1ubuntu0.6, 7.88.1-8ubuntu2.1 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538
CWE-200 Medium
No
No
7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535
CWE-371 Low
No
No
Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73827 - Improper input validation
CVE-2023-27534
CWE-20 Low
No
No
7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 45 more
#VU73826 - Improper input validation
CVE-2023-27533
CWE-20 Low
No
No
Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10, 7.85.0-1ubuntu0.5 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 42 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
Ubuntu Pro (Infra-only), 7.47.01ubuntu2.19+esm3, 7.58.0-2ubuntu3.14, 7.68.0-1ubuntu2.6, 7.74.0-1ubuntu2.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
Ubuntu Pro (Infra-only), 7.47.01ubuntu2.19+esm3, 7.58.0-2ubuntu3.14, 7.68.0-1ubuntu2.6, 7.74.0-1ubuntu2.1 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more


Showing elements 41 - 60 out of 94