When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-curlalma-upgrade-curl-minimalalma-upgrade-libcurlalma-upgrade-libcurl-develalma-upgrade-libcurl-minimal | May 15, 2023 | Sep 23, 2022 | |
| Alpine Linux | alpine-linux-upgrade-curl | Mar 26, 2024 | Sep 23, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-curlamazon-linux-ami-2-upgrade-curl-debuginfoamazon-linux-ami-2-upgrade-libcurlamazon-linux-ami-2-upgrade-libcurl-devel | Nov 10, 2022 | Sep 23, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-curl | Dec 10, 2022 | Sep 1, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-curlamazon-linux-2023-upgrade-curl-debuginfoamazon-linux-2023-upgrade-curl-debugsourceamazon-linux-2023-upgrade-curl-minimalamazon-linux-2023-upgrade-curl-minimal-debuginfoamazon-linux-2023-upgrade-libcurlamazon-linux-2023-upgrade-libcurl-debuginfoamazon-linux-2023-upgrade-libcurl-develamazon-linux-2023-upgrade-libcurl-minimalamazon-linux-2023-upgrade-libcurl-minimal-debuginfo | Feb 17, 2025 | Aug 31, 2022 | |
| Apple Osx Curl | apple-osx-upgrade-latest | Jan 24, 2023 | Sep 23, 2022 | |
| Autodesk Autocad | autodesk-autocad-upgrade-latest | May 29, 2026 | Jun 23, 2023 | |
| Centos_linux | — | centos-upgrade-curlcentos-upgrade-curl-debuginfocentos-upgrade-curl-debugsourcecentos-upgrade-curl-minimalcentos-upgrade-curl-minimal-debuginfocentos-upgrade-libcurlcentos-upgrade-libcurl-debuginfocentos-upgrade-libcurl-develcentos-upgrade-libcurl-minimalcentos-upgrade-libcurl-minimal-debuginfo | May 15, 2023 | Sep 23, 2022 |
| Debian | debian-upgrade-curl | Jan 30, 2023 | Sep 23, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-curl | Dec 19, 2022 | Sep 23, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-curlhuawei-euleros-2_0_sp10-upgrade-libcurl | Dec 22, 2022 | Sep 23, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-curlhuawei-euleros-2_0_sp11-upgrade-libcurl | Jan 6, 2023 | Sep 23, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-curlhuawei-euleros-2_0_sp8-upgrade-libcurlhuawei-euleros-2_0_sp8-upgrade-libcurl-devel | Dec 9, 2022 | Sep 23, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-curlhuawei-euleros-2_0_sp9-upgrade-libcurl | Nov 15, 2022 | Sep 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-curloracle-linux-upgrade-curl-minimaloracle-linux-upgrade-libcurloracle-linux-upgrade-libcurl-develoracle-linux-upgrade-libcurl-minimal | May 17, 2023 | Aug 31, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-curlredhat-upgrade-curl-debuginforedhat-upgrade-curl-debugsourceredhat-upgrade-curl-minimalredhat-upgrade-curl-minimal-debuginforedhat-upgrade-libcurlredhat-upgrade-libcurl-debuginforedhat-upgrade-libcurl-develredhat-upgrade-libcurl-minimalredhat-upgrade-libcurl-minimal-debuginfo | May 15, 2023 | Sep 23, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Sep 23, 2022 | |
| Suse | — | suse-upgrade-curlsuse-upgrade-libcurl-develsuse-upgrade-libcurl-devel-32bitsuse-upgrade-libcurl4suse-upgrade-libcurl4-32bit | Oct 26, 2022 | Sep 23, 2022 |
| Ubuntu | ubuntu-pro-upgrade-curlubuntu-pro-upgrade-libcurl3ubuntu-pro-upgrade-libcurl3-gnutlsubuntu-pro-upgrade-libcurl3-nssubuntu-upgrade-curlubuntu-upgrade-libcurl3-gnutlsubuntu-upgrade-libcurl3-nssubuntu-upgrade-libcurl4 | Sep 2, 2022 | Sep 1, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub