Red Hat Security Advisory

RHSA-2023:7540

curl security and bug fix update

Released 2023-11-28 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.8) curl-7.61.1-30.el8_8.6, libcurl-7.61.1-30.el8_8.6, libcurl-devel-7.61.1-30.el8_8.6 +1

TI-2023-19923 CVE-2023-38546 · GHSA-x3qx-m3c2-qfhx

LOW 27

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.05956 Published 2023-10-18 Partial fix · 8.4.0, 7.9.1