When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Mar 11, 2026 |
| Amazon_linux_2023 | — | Upgrade libcurlUpgrade libcurl-debuginfoUpgrade curl-minimalUpgrade curl-debuginfoUpgrade libcurl-minimal-debuginfoUpgrade libcurl-develUpgrade curl-minimal-debuginfoUpgrade curlUpgrade curl-debugsourceUpgrade libcurl-minimal | May 19, 2026 | Mar 11, 2026 |
| Debian | — | Upgrade curl | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade curl | Mar 12, 2026 | Mar 11, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 11, 2026 |
| Suse | — | Upgrade libcurl-devel-32bitUpgrade curl-fish-completionUpgrade libcurl4Upgrade libcurl-devel-docUpgrade libcurl-mini4Upgrade curl-zsh-completionUpgrade curlUpgrade libcurl4-32bitUpgrade libcurl-devel | Mar 13, 2026 | Mar 12, 2026 |
| Ubuntu | — | Upgrade libcurl3-gnutlsUpgrade libcurl3t64-gnutlsUpgrade curlUpgrade libcurl3-nssUpgrade libcurl4Upgrade libcurl4t64 | Mar 12, 2026 | Mar 11, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub