Known vulnerabilities in curl - page 3

Software: curl
Software CPE: cpe:2.3:o:fedoraproject:curl:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 137
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 137 known vulnerabilities: 18 high, 64 medium, 55 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80732 - Resource exhaustion
CVE-2023-38039
CWE-400 Medium
No
No
7.85.0-11.fc37, 8.0.1-4.fc38, 8.2.1-2.fc39 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001
CWE-367 Low
No
No
7.85.0-10.fc37, 8.0.1-3.fc38 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322
CWE-440 Medium
No
No
7.85.0-9.fc37, 8.0.1-2.fc38 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321
CWE-295 Medium
No
No
7.85.0-9.fc37, 8.0.1-2.fc38 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538
CWE-200 Medium
No
No
7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU73830 - Double Free
CVE-2023-27537
CWE-415 High
No
No
7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032044
SB2023060527
and 15 more
#VU73829 - State Issues
CVE-2023-27536
CWE-371 Medium
No
No
7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535
CWE-371 Low
No
No
7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73827 - Improper input validation
CVE-2023-27534
CWE-20 Low
No
No
7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 45 more
#VU73826 - Improper input validation
CVE-2023-27533
CWE-20 Low
No
No
7.82.0-14.fc36, 7.85.0-8.fc37, 7.87.0-7.fc38 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 42 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
7.82.0-13.fc36, 7.85.0-6.fc37 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915
CWE-319 Medium
No
No
7.85.0-6.fc37 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914
CWE-319 Medium
No
No
7.85.0-6.fc37 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU70457 - Security Features
CVE-2022-43551
CWE-254 Medium
No
No
7.82.0-12.fc36, 7.85.0-5.fc37 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
7.82.0-12.fc36, 7.85.0-5.fc37 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916
CWE-319 Medium
No
No
7.79.1-7.fc35, 7.82.0-9.fc36, 7.85.0-2.fc37 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915
CWE-415 Medium
No
No
7.79.1-7.fc35, 7.82.0-9.fc36, 7.85.0-2.fc37 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260
CWE-121 Low
No
No
7.79.1-7.fc35, 7.82.0-9.fc36, 7.85.0-2.fc37 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU68746 - Expected Behavior Violation
CVE-2022-32221
CWE-440 Medium
No
No
7.79.1-7.fc35, 7.82.0-9.fc36, 7.85.0-2.fc37 26.10.2022 SB2022102624
SB2022102643
SB2022102644
and 58 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
7.79.1-6.fc35, 7.82.0-8.fc36, 7.85.0-1.fc37 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more


Showing elements 41 - 60 out of 137