Red Hat Security AdvisoryRHSA-2023:3460
curl security update
Released 2023-06-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) curl-7.61.1-18.el8_4.3, libcurl-7.61.1-18.el8_4.3, libcurl-devel-7.61.1-18.el8_4.3 +1
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) curl-7.61.1-18.el8_4.3, libcurl-7.61.1-18.el8_4.3, libcurl-devel-7.61.1-18.el8_4.3 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) curl-7.61.1-18.el8_4.3, libcurl-7.61.1-18.el8_4.3, libcurl-devel-7.61.1-18.el8_4.3 +1
Fixes 2 records
Priority MEDIUM 62
An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potent…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01742 · Published 2023-02-23 · Partial fix CWE-770
Priority MEDIUM 62
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.36348 · Published 2022-07-07 · Partial fix CWE-770
