curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-curlalma-upgrade-libcurlalma-upgrade-libcurl-develalma-upgrade-libcurl-minimal | May 4, 2022 | Dec 14, 2020 | |
| Alpine Linux | alpine-linux-upgrade-curl | Jan 5, 2021 | Dec 14, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-curlamazon-linux-ami-2-upgrade-curl-debuginfoamazon-linux-ami-2-upgrade-libcurlamazon-linux-ami-2-upgrade-libcurl-devel | Aug 6, 2021 | Dec 14, 2020 | |
| Apple Osx Curl | apple-osx-security-update-2021-002-catalinaapple-osx-security-update-2021-003-mojaveapple-osx-upgrade-latest | Aug 23, 2021 | Dec 14, 2020 | |
| Centos_linux | — | centos-upgrade-curlcentos-upgrade-curl-debuginfocentos-upgrade-curl-debugsourcecentos-upgrade-curl-minimal-debuginfocentos-upgrade-libcurlcentos-upgrade-libcurl-debuginfocentos-upgrade-libcurl-develcentos-upgrade-libcurl-minimalcentos-upgrade-libcurl-minimal-debuginfo | Jun 1, 2021 | Dec 14, 2020 |
| Debian | debian-upgrade-curl | Dec 21, 2020 | Dec 14, 2020 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 19, 2021 | |
| Freebsd | freebsd-upgrade-package-curl | Dec 10, 2020 | Dec 9, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-curl | Dec 29, 2020 | Dec 14, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-curlhuawei-euleros-2_0_sp8-upgrade-libcurlhuawei-euleros-2_0_sp8-upgrade-libcurl-devel | Feb 2, 2021 | Dec 14, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-curlhuawei-euleros-2_0_sp9-upgrade-libcurl | Jan 5, 2021 | Dec 14, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-curl-7-74-0-11-4-33-0-1-94-0 | May 19, 2021 | Dec 14, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-curloracle-linux-upgrade-libcurloracle-linux-upgrade-libcurl-develoracle-linux-upgrade-libcurl-minimal | May 26, 2021 | Dec 9, 2020 |
| Redhat_linux | redhat-upgrade-curlredhat-upgrade-curl-debuginforedhat-upgrade-curl-debugsourceredhat-upgrade-curl-minimal-debuginforedhat-upgrade-libcurlredhat-upgrade-libcurl-debuginforedhat-upgrade-libcurl-develredhat-upgrade-libcurl-minimalredhat-upgrade-libcurl-minimal-debuginfo | May 21, 2021 | Dec 14, 2020 | |
| Rocky_linux | rocky-upgrade-curlrocky-upgrade-curl-debuginforocky-upgrade-curl-debugsourcerocky-upgrade-libcurlrocky-upgrade-libcurl-debuginforocky-upgrade-libcurl-develrocky-upgrade-libcurl-minimalrocky-upgrade-libcurl-minimal-debuginfo | Mar 12, 2024 | Dec 14, 2020 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Dec 14, 2020 | |
| Suse | — | suse-upgrade-curlsuse-upgrade-curl-minisuse-upgrade-libcurl-develsuse-upgrade-libcurl-devel-32bitsuse-upgrade-libcurl-mini-develsuse-upgrade-libcurl4suse-upgrade-libcurl4-32bitsuse-upgrade-libcurl4-mini | Dec 12, 2020 | Dec 9, 2020 |
| Ubuntu | ubuntu-upgrade-curlubuntu-upgrade-libcurl3ubuntu-upgrade-libcurl3-gnutlsubuntu-upgrade-libcurl3-nssubuntu-upgrade-libcurl4 | Dec 10, 2020 | Dec 9, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub