Red Hat Security Advisory

RHSA-2023:1140

curl security update

Released 2023-03-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-25.el8_7.3, libcurl-7.61.1-25.el8_7.3, libcurl-devel-7.61.1-25.el8_7.3 +1

Fixes 1 record

TI-2023-09714 CVE-2023-23916 · GHSA-v8vq-prc2-j6gx

Resource allocation without limits in https://github.com/curl/curl

MEDIUM 62

An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potent…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01742 Published 2023-02-23 Partial fix CWE-770