A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade percona55-serverUpgrade mariadb101-serverUpgrade mysql80-serverUpgrade mariadb102-serverUpgrade mariadb104-serverUpgrade mariadb103-serverUpgrade mysql56-serverUpgrade mariadb55-serverUpgrade percona57-serverUpgrade percona56-serverUpgrade mysql57-server | Nov 3, 2019 | Nov 2, 2019 |
| Oracle Solaris | — | Upgrade database/mysql-56/tests to version 5.6.46-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.46-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.28-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.28-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.28-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.28-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.28-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.46-11.4.17.0.1.2.0 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.46-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Jul 2, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 2, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub