Red Hat Security AdvisoryRHSA-2024:3998
curl security update
Released 2024-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) libcurl-devel-7.76.1-23.el9_2.7
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) curl-7.76.1-23.el9_2.7, curl-minimal-7.76.1-23.el9_2.7, libcurl-7.76.1-23.el9_2.7 +1
Fixes 1 record
Priority HIGH 69
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.36081 · Published 2024-03-27 · Partial fix CWE-772
