Known vulnerabilities in curl - page 2
Vendor:
Fedoraproject
Software:
curl
Software CPE:
cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
126
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.15.0-9.fc43
8.18.0-9.fc44
8.15.0-8.fc43
8.18.0-8.fc44
8.21.0~rc2-2.fc45
8.15.0-7.fc43
8.11.1-8.fc42
8.15.0-6.fc43
8.18.0-6.fc44
8.11.1-6.fc42
8.9.1-4.fc41
7.69.1-7.fc32
7.71.1-8.fc33
7.66.0-3.fc31
7.69.1-5.fc32
7.69.1-4.fc32
7.66.0-2.fc31
7.61.1-12.fc29
7.65.3-4.fc30
7.66.0-1.fc31
7.64.0-7.fc30
7.61.1-11.fc29
7.61.1-8.fc29
7.61.1-7.fc29
7.61.1-5.fc29
7.59.0-9.fc28
7.61.1-4.fc29
7.59.0-8.fc28
7.59.0-7.fc28
7.61.1-1.fc29
7.55.1-14.fc27
7.59.0-5.fc28
7.59.0-3.fc28
7.55.1-11.fc27
7.53.1-16.fc26
7.55.1-10.fc27
7.59.0-2.fc28
7.59.0-1.fc28
7.53.1-14.fc26
7.55.1-9.fc27
7.53.1-13.fc26
7.55.1-8.fc27
7.53.1-12.fc26
7.55.1-7.fc27
7.55.1-6.fc27
7.53.1-11.fc26
7.51.0-9.fc25
7.53.1-10.fc26
7.53.1-6.fc26
7.53.1-4.fc26
7.51.0-6.fc25
7.47.1-10.fc24
7.51.0-4.fc25
7.51.0-1.fc25
7.47.1-9.fc24
7.47.1-8.fc24
7.50.3-1.fc25
7.43.0-10.fc23
7.47.1-6.fc24
7.43.0-8.fc23
7.43.0-5.fc23
7.40.0-8.fc22
7.40.0-5.fc22
7.37.0-14.fc21
7.40.0-3.fc22
7.37.0-12.fc21
7.37.0-11.fc21
7.37.0-9.fc21
7.37.0-7.fc21
7.85.0-5.fc37
7.82.0-12.fc36
7.85.0-2.fc37
7.79.1-7.fc35
7.82.0-9.fc36
7.82.0-8.fc36
7.79.1-6.fc35
7.85.0-1.fc37
7.84.0-3.fc37
7.82.0-6.fc36
7.79.1-5.fc35
7.79.1-4.fc35
7.76.1-16.fc34
7.82.0-5.fc36
7.82.0-4.fc36
7.79.1-3.fc35
7.76.1-15.fc34
7.79.1-1.fc35
7.76.1-12.fc34
7.71.1-11.fc33
7.79.0-4.fc35
7.71.1-10.fc33
7.76.1-7.fc34
7.76.1-3.fc34
7.71.1-9.fc33
7.76.0-1.fc34
7.69.1-8.fc32
8.9.1-3.fc41
8.6.0-9.fc40
8.2.1-5.fc39
8.6.0-8.fc40
8.0.1-6.fc38
8.2.1-4.fc39
7.85.0-12.fc37
8.0.1-5.fc38
8.2.1-3.fc39
7.85.0-11.fc37
8.0.1-4.fc38
8.2.1-2.fc39
7.85.0-10.fc37
8.0.1-3.fc38
8.0.1-2.fc38
7.85.0-9.fc37
7.82.0-14.fc36
7.87.0-7.fc38
7.85.0-8.fc37
7.82.0-13.fc36
7.85.0-6.fc37
Vulnerabilities (126)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115138 - Out-of-bounds read CVE-2025-9086 |
CWE-125 | Low | 8.9.1-4.fc41, 8.11.1-6.fc42, 8.15.0-7.fc43 | 10.09.2025 |
SB2025091034 SB2025091144 SB2025091301 and 44 more |
||
| #VU99865 - Comparison using wrong factors CVE-2024-9681 |
CWE-1025 | Low | 8.9.1-3.fc41 | 06.11.2024 |
SB2024110621 SB2024110655 SB2024110656 and 30 more |
||
| #VU94715 - Double Free CVE-2024-6197 |
CWE-415 | Medium | 8.6.0-9.fc40 | 24.07.2024 |
SB2024072431 SB2024080568 SB20240806402 and 11 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 8.2.1-5.fc39, 8.6.0-8.fc40 | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87846 - Improper input validation CVE-2024-2004 |
CWE-20 | Low | 8.2.1-5.fc39, 8.6.0-8.fc40 | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032748 and 28 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 8.0.1-6.fc38, 8.2.1-4.fc39 | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU83899 - Missing Encryption of Sensitive Data CVE-2023-46219 |
CWE-311 | Medium | 8.0.1-6.fc38, 8.2.1-4.fc39 | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 31 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 7.85.0-12.fc37, 8.0.1-5.fc38, 8.2.1-3.fc39 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 7.85.0-12.fc37, 8.0.1-5.fc38, 8.2.1-3.fc39 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 7.85.0-11.fc37, 8.0.1-4.fc38, 8.2.1-2.fc39 | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
||
| #VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2023-32001 |
CWE-367 | Low | 7.85.0-10.fc37, 8.0.1-3.fc38 | 21.07.2023 |
SB2023072135 SB2023072137 SB2023072138 and 17 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 7.85.0-9.fc37, 8.0.1-2.fc38 | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 7.85.0-9.fc37, 8.0.1-2.fc38 | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU73831 - Exposure of sensitive information to an unauthorized actor CVE-2023-27538 |
CWE-200 | Medium | 7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 40 more |
||
| #VU73830 - Double Free CVE-2023-27537 |
CWE-415 | High | 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032044 SB2023060527 and 15 more |
||
| #VU73829 - State Issues CVE-2023-27536 |
CWE-371 | Medium | 7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 80 more |
||
| #VU73828 - State Issues CVE-2023-27535 |
CWE-371 | Low | 7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 84 more |
||
| #VU73827 - Improper input validation CVE-2023-27534 |
CWE-20 | Low | 7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 45 more |
||
| #VU73826 - Improper input validation CVE-2023-27533 |
CWE-20 | Low | 7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 42 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 7.85.0-6.fc37 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
Showing elements 21 - 40 out of 126