Known vulnerabilities in curl (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
curl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:curl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
54
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
7.76.1-40.el9_8.9
7.61.1-34.el8_10.18
7.76.1-40.el9_8.8
8.12.1-1.el10_0.10
7.76.1-40.el9_8.7
7.76.1-40.el9_8.5
7.61.1-34.el8_10.13
7.76.1-40.el9
8.12.1-2.el10_1.2
8.12.1-1.el10_0.4
7.76.1-35.el9_7.3
7.76.1-31.el9
7.76.1-23.el9_2.8
7.76.1-14.el9_0.12
7.76.1-29.el9_4.3
7.76.1-31.el9_6.2
7.76.1-34.el9
7.76.1-31.el9_6.1
7.76.1-29.el9_4.1
7.76.1-23.el9_2.7
7.19.7-37.el6_5.3
7.12.1-11.1.el4_8.3
7.12.1-11.1.el4_8.1
7.15.5-2.1.el5_3.5
7.12.1-11.1.el4_7.1
7.15.5-2.1.el5_3.4
7.61.1-33.el8_9.5
7.76.1-26.el9_3.3
7.61.1-30.el8_8.9
7.76.1-23.el9_2.6
7.76.1-14.el9_0.11
7.29.0-59.el7_9.2
7.61.1-30.el8_8.6
7.76.1-26.el9
7.76.1-26.el9_3.2
7.61.1-22.el8_6.9
7.76.1-23.el9_2.4
7.76.1-14.el9_0.9
7.76.1-14.el9_0.7
7.61.1-30.el8_8.3
7.76.1-23.el9_2.2
7.76.1-14.el9_0.6
7.61.1-18.el8_4.3
7.61.1-30.el8
7.61.1-30.el8_8.2
7.76.1-23.el9
7.76.1-23.el9_2.1
7.61.1-22.el8_6.6
7.76.1-19.el9_1.2
7.61.1-25.el8_7.3
7.76.1-19.el9_1.1
7.76.1-19.el9
7.61.1-22.el8_6.4
7.76.1-14.el9_0.5
7.61.1-22.el8_6.3
7.61.1-12.el8_2.4
7.61.1-22.el8
7.61.1-18.el8_4.2
7.61.1-12.el8_2.3
7.61.1-18.el8_4.1
7.61.1-18.el8
7.29.0-54.el7_7.4
7.29.0-51.el7_6.4
7.29.0-42.el7_4.3
7.61.1-12.el8_2.2
7.29.0-59.el7_9.1
7.61.1-14.el8
7.29.0-59.el7
7.29.0-54.el7_7.3
7.61.1-12.el8
7.29.0-57.el7
7.61.1-11.el8
7.29.0-54.el7
7.29.0-51.el7
7.29.0-42.el7
7.15.5-9.el5
7.12.1-17.el4
7.15.5-16.el5_9
7.15.5-17.el5_9
7.29.0-25.el7
7.29.0-35.el7
7.29.0-32.el7
7.19.7-54.el6_10
7.19.7-53.el6_9
7.19.7-52.el6
7.19.7-46.el6
7.19.7-40.el6_6
7.19.7-37.el6_5
7.19.7-37.el6_4
7.19.7-36.el6_4
7.19.7-35.el6
7.19.7-26.el6_2
7.19.7-26.el6_1
7.19.7-26.el6
7.19.7-16.el6
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 7.76.1-14.el9_0.9, 7.76.1-23.el9_2.4, 7.76.1-26.el9_3.2 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 7.61.1-22.el8_6.9, 7.61.1-30.el8_8.3, 7.76.1-14.el9_0.7, 7.76.1-23.el9_2.2 | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU73831 - Exposure of sensitive information to an unauthorized actor CVE-2023-27538 |
CWE-200 | Medium | 7.76.1-26.el9 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 40 more |
||
| #VU73829 - State Issues CVE-2023-27536 |
CWE-371 | Medium | 7.61.1-30.el8_8.3, 7.76.1-26.el9 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 80 more |
||
| #VU73828 - State Issues CVE-2023-27535 |
CWE-371 | Low | 7.61.1-30.el8_8.2, 7.76.1-23.el9_2.1 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 84 more |
||
| #VU73827 - Improper input validation CVE-2023-27534 |
CWE-20 | Low | 7.76.1-26.el9 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 45 more |
||
| #VU73826 - Improper input validation CVE-2023-27533 |
CWE-20 | Low | 7.76.1-26.el9 | 20.03.2023 |
SB2023032027 SB2023032028 SB2023032044 and 42 more |
||
| #VU72337 - Allocation of Resources Without Limits or Throttling CVE-2023-23916 |
CWE-770 | Medium | 7.61.1-18.el8_4.3, 7.61.1-22.el8_6.6, 7.61.1-25.el8_7.3, 7.76.1-14.el9_0.6, 7.76.1-19.el9_1.2 | 16.02.2023 |
SB2023021668 SB2023021670 SB2023021671 and 89 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 7.76.1-14.el9_0.6, 7.76.1-19.el9_1.1 | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 7.61.1-30.el8, 7.76.1-23.el9 | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 7.61.1-22.el8_6.4, 7.76.1-14.el9_0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 7.76.1-14.el9_0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 7.61.1-18.el8_4.3, 7.61.1-22.el8_6.4, 7.76.1-14.el9_0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU63009 - Incorrect Implementation of Authentication Algorithm CVE-2022-27782 |
CWE-303 | Medium | 7.61.1-22.el8_6.3 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 68 more |
||
| #VU62644 - Exposure of sensitive information to an unauthorized actor CVE-2022-27776 |
CWE-200 | Low | 7.61.1-22.el8_6.3 | 27.04.2022 |
SB2022042706 SB2022042803 SB2022042904 and 62 more |
||
| #VU62643 - Resource Management Errors CVE-2022-27775 |
CWE-399 | Low | 7.76.1-19.el9 | 27.04.2022 |
SB2022042706 SB2022042803 SB2022042904 and 30 more |
||
| #VU62641 - Exposure of sensitive information to an unauthorized actor CVE-2022-27774 |
CWE-200 | Medium | 7.61.1-22.el8_6.3 | 27.04.2022 |
SB2022042706 SB2022042803 SB2022042904 and 57 more |
||
| #VU62640 - Improper Authentication CVE-2022-22576 |
CWE-287 | Medium | 7.61.1-22.el8_6.3 | 27.04.2022 |
SB2022042706 SB2022042803 SB2022042904 and 60 more |
||
| #VU56615 - Insufficient Verification of Data Authenticity CVE-2021-22947 |
CWE-345 | Medium | 7.61.1-12.el8_2.4, 7.61.1-18.el8_4.2 | 15.09.2021 |
SB2021091514 SB2021091601 SB2021091715 and 43 more |
||
| #VU56613 - Cleartext Transmission of Sensitive Information CVE-2021-22946 |
CWE-319 | Medium | 7.61.1-12.el8_2.4, 7.61.1-18.el8_4.2 | 15.09.2021 |
SB2021091514 SB2021091601 SB2021091715 and 53 more |
Showing elements 21 - 40 out of 54