Every CVE Search/ Get API key

CVE-2022-32221

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (...

9.8 CriticalFix available

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

5.09%Up 4.2 points since Dec 6, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-200, CWE-668
Updated
2026-11-02
CVE List 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-200
Updated
2026-11-02
EUVDEUVD-2022-53422 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
EUVD-2022-53422
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-grfr-78m7-q35q 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (...

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
GHSA-grfr-78m7-q35q
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-200, CWE-668
Updated
2026-11-02
OSVALPINE-CVE-2022-32221 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
ALPINE-CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-38548 9.8

CVE-2022-32221 affecting package tensorflow for versions less than 2.16.1-1

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
AZL-38548
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 35 moreShow less
OSVBELL-CVE-2022-32221 9.8

CVE-2022-32221 does not affect BellSoft software

Record
BELL-CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-200
Updated
2026-11-02
OSVDEBIAN-CVE-2022-32221 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
DEBIAN-CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVJLSEC-2026-396 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
JLSEC-2026-396
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-2039 4.8

curl security update

CURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set if it previously used the same handle to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.(CVE-2022-32221)

Record
OESA-2022-2039
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2022-2040 4.8

curl security update

CURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set if it previously used the same handle to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.(CVE-2022-32221)

Record
OESA-2022-2040
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2022-2041 7.3

curl security update

CURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 status code to the client. Due to flaws in the error/cleanup handling, this could trigger a double free in curl if one of the following schemes were used in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, or telnet. The earliest affected version is 7.77.0.(CVE-2022-42915)

A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set if it previously used the same handle to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.(CVE-2022-32221)

In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.(CVE-2022-42916)

Record
OESA-2022-2041
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2023-1834 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1834
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1835 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1835
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1836 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21509)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21515)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21517)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21522)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21525)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21526)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are…

Record
OESA-2023-1836
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2071 9.8

mysql security update

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates

Security Fix(es):

Security Fix(es):

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.(CVE-2021-22570)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21412)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21413)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21414)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2022-21417)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).(CVE-2022-21418)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized…

Record
OESA-2024-2071
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:8840 9.8

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update

Record
RHSA-2022:8840
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0333 4.8

Red Hat Security Advisory: curl security update

Record
RHSA-2023:0333
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:4139 6.5

Red Hat Security Advisory: curl security update

Record
RHSA-2023:4139
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:0333 4.8

Moderate: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • curl: POST following PUT confusion (CVE-2022-32221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:0333
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-32221 9.8

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
UBUNTU-CVE-2022-32221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:0333 No score

Moderate: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • curl: POST following PUT confusion (CVE-2022-32221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0333
Updated
2026-11-02
OSVCLSA-2022-1667515188 No score

Fix CVE(s): CVE-2022-32221

  • SECURITY UPDATE: POST following PUT confusion
    • debian/patches/CVE-2022-32221.patch: when POST is set, reset the 'upload' field
    • CVE-2022-32221
Record
CLSA-2022-1667515188
Updated
2026-11-02
OSVCLSA-2022-1671123782 No score

curl: Fix of CVE-2022-32221

  • CVE-2022-32221: fix issue when POST following PUT confusion
  • fix the contents of some test suites: replace the unsupported variable TESTNUMBER with a real value
Record
CLSA-2022-1671123782
Updated
2026-11-02
OSVCLSA-2022-1671123986 No score

curl: Fix of CVE-2022-32221

  • CVE-2022-32221: fix issue when POST following PUT confusion
  • fix the contents of some test suites: replace the unsupported variable TESTNUMBER with a real value
Record
CLSA-2022-1671123986
Updated
2026-11-02
OSVCLSA-2022-1671124217 No score

curl: Fix of CVE-2022-32221

  • CVE-2022-32221: fix issue when POST following PUT confusion
Record
CLSA-2022-1671124217
Updated
2026-11-02
OSVCLSA-2022-1671126165 No score

curl: Fix of CVE-2022-32221

  • CVE-2022-32221: fix issue when POST following PUT confusion
Record
CLSA-2022-1671126165
Updated
2026-11-02
OSVCURL-CVE-2022-32221 No score

POST following PUT confusion

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback.

This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.

The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.

Record
CURL-CVE-2022-32221
Updated
2026-11-02
OSVMGASA-2022-0405 No score

Updated curl packages fix security vulnerability

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. (CVE-2022-32221)

Record
MGASA-2022-0405
Updated
2026-11-02
OSVopenSUSE-SU-2024:12447-1 No score

curl-7.86.0-1.1 on GA media

These are all security issues fixed in the curl-7.86.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12447-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12714-1 No score

davix-0.8.4-1.1 on GA media

These are all security issues fixed in the davix-0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12714-1
Updated
2026-11-02
OSVSUSE-SU-2022:3769-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
Record
SUSE-SU-2022:3769-1
Updated
2026-11-02
OSVSUSE-SU-2022:3770-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
Record
SUSE-SU-2022:3770-1
Updated
2026-11-02
OSVSUSE-SU-2022:3772-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
Record
SUSE-SU-2022:3772-1
Updated
2026-11-02
OSVSUSE-SU-2022:3773-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
Record
SUSE-SU-2022:3773-1
Updated
2026-11-02
OSVSUSE-SU-2022:3774-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  • CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
Record
SUSE-SU-2022:3774-1
Updated
2026-11-02
OSVSUSE-SU-2022:3785-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  • CVE-2022-42916: Fixed HSTS bypass via IDN (bsc#1204386).
Record
SUSE-SU-2022:3785-1
Updated
2026-11-02
OSVUSN-5702-1 No score

curl vulnerabilities

Robby Simpson discovered that curl incorrectly handled certain POST operations after PUT operations. This issue could cause applications using curl to send the wrong data, perform incorrect memory operations, or crash. (CVE-2022-32221)

Hiroki Kurosawa discovered that curl incorrectly handled parsing .netrc files. If an attacker were able to provide a specially crafted .netrc file, this issue could cause curl to crash, resulting in a denial of service. This issue only affected Ubuntu 22.10. (CVE-2022-35260)

It was discovered that curl incorrectly handled certain HTTP proxy return codes. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-42915)

Hiroki Kurosawa discovered that curl incorrectly handled HSTS support when certain hostnames included IDN characters. A remote attacker could possibly use this issue to cause curl to use unencrypted connections. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-42916)

Record
USN-5702-1
Updated
2026-11-02
OSVUSN-5702-2 No score

curl vulnerability

USN-5702-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Robby Simpson discovered that curl incorrectly handled certain POST operations after PUT operations. This issue could cause applications using curl to send the wrong data, perform incorrect memory operations, or crash. (CVE-2022-32221)

Record
USN-5702-2
Updated
2026-11-02
OSVUSN-5823-1 No score

mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.32 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. Ubuntu 18.04 LTS has been updated to MySQL 5.7.41.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-41.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html https://www.oracle.com/security-alerts/cpujan2023.html

Record
USN-5823-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
curl
Alpine:v3.15
 before 7.80.0-r4
7.80.0-r4
curl
Alpine:v3.16
 before 7.83.1-r4
7.83.1-r4
curl
Alpine:v3.17
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.18
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.19
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.20
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.21
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.22
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.23
 before 7.86.0-r0
7.86.0-r0
curl
Alpine:v3.24
 before 7.86.0-r0
7.86.0-r0
Show 175 moreShow less
Affected packages
PackageAffectedFixed
curl
AlmaLinux:9
 before 7.76.1-19.el9_1.1
7.76.1-19.el9_1.1
curl-minimal
AlmaLinux:9
 before 7.76.1-19.el9_1.1
7.76.1-19.el9_1.1
libcurl
AlmaLinux:9
 before 7.76.1-19.el9_1.1
7.76.1-19.el9_1.1
libcurl-devel
AlmaLinux:9
 before 7.76.1-19.el9_1.1
7.76.1-19.el9_1.1
libcurl-minimal
AlmaLinux:9
 before 7.76.1-19.el9_1.1
7.76.1-19.el9_1.1
tensorflow
Azure Linux:3
 before 2.16.1-1
2.16.1-1
curl
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl3
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl3-gnutls
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl3-nss
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl4-doc
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl4-gnutls-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl4-nss-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
libcurl4-openssl-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els6
7.47.0-1ubuntu2.23+tuxcare.els6
curl
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
curl-minimal
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl-devel
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl-minimal
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
curl
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
curl-minimal
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl-devel
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
libcurl-minimal
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els5
7.61.1-22.el8.tuxcare.els5
curl
TuxCare:OracleLinux:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
libcurl
TuxCare:OracleLinux:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
libcurl-devel
TuxCare:OracleLinux:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
curl
TuxCare:CentOS:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
libcurl
TuxCare:CentOS:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
libcurl-devel
TuxCare:CentOS:6
 before 7.19.7-59.el6.tuxcare.els7
7.19.7-59.el6.tuxcare.els7
curl
Debian:12
 before 7.86.0-1
7.86.0-1
curl
Debian:13
 before 7.86.0-1
7.86.0-1
curl
Debian:14
 before 7.86.0-1
7.86.0-1
curl
Debian:10
From an advisory covering 4 CVEs
 before 7.64.0-4+deb10u4, plus listed versions
7.64.0-47.64.0-4+deb10u17.64.0-4+deb10u27.64.0-4+deb10u3
7.64.0-4+deb10u4
curl
Debian:11
From an advisory covering 2 CVEs
 before 7.74.0-1.3+deb11u5, plus listed versions
7.74.0-1.37.74.0-1.3+deb11u17.74.0-1.3+deb11u27.74.0-1.3+deb11u37.74.0-1.3+deb11u4
7.74.0-1.3+deb11u5
CURL_jll
Julia
 before 8.5.0+0
8.5.0+0
LibCURL_jll
Julia
 before 7.87.0+0
7.87.0+0
curl
Mageia:8
 before 7.74.0-1.9.mga8
7.74.0-1.9.mga8
curl
openEuler:20.03-LTS-SP1
 before 7.71.1-19.oe1
7.71.1-19.oe1
curl
openEuler:20.03-LTS-SP3
 before 7.71.1-19.oe1
7.71.1-19.oe1
curl
openEuler:22.03-LTS
From an advisory covering 3 CVEs
 before 7.79.1-12.oe2203
7.79.1-12.oe2203
mysql
openEuler:22.03-LTS-SP1
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203sp1
8.0.35-1.oe2203sp1
mysql
openEuler:22.03-LTS-SP2
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203sp2
8.0.35-1.oe2203sp2
mysql
openEuler:22.03-LTS
From an advisory covering 118 CVEs
 before 8.0.35-1.oe2203
8.0.35-1.oe2203
mysql
openEuler:20.03-LTS-SP4
From an advisory covering 218 CVEs
 before 8.0.38-1.oe2003sp4
8.0.38-1.oe2003sp4
jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el7jbcs
1:1.1.1k-13.el7jbcs
jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-libs-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:1.1.1k-13.el8jbcs
1:1.1.1k-13.el8jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el7jbcs
1:2.4.51-37.el7jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el7jbcs
0:2.4.51-37.el7jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el7jbcs
1:2.4.51-37.el7jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_session-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:2.4.51-37.el8jbcs
0:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 1:2.4.51-37.el8jbcs
1:2.4.51-37.el8jbcs
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el7jbcs
0:7.86.0-2.el7jbcs
jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:7.86.0-2.el8jbcs
0:7.86.0-2.el8jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:1.15.19-20.el7jbcs
0:1.15.19-20.el7jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 17 CVEs
 before 0:1.15.19-20.el7jbcs
0:1.15.19-20.el7jbcs
jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:1.15.19-20.el8jbcs
0:1.15.19-20.el8jbcs
jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 17 CVEs
 before 0:1.15.19-20.el8jbcs
0:1.15.19-20.el8jbcs
curl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-minimal-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-devel
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-minimal-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-minimal
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-minimal-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-minimal
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
libcurl-minimal-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-minimal-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-devel
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-minimal-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-debugsource
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-minimal
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl-minimal-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-minimal
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
libcurl-minimal-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 2 CVEs
 before 0:7.76.1-14.el9_0.6
0:7.76.1-14.el9_0.6
curl
Rocky Linux:9
 before 0:7.76.1-19.el9_1.1
0:7.76.1-19.el9_1.1
curl
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 7.60.0-11.49.1
7.60.0-11.49.1
curl
SUSE:Linux Enterprise Server 12 SP5
 before 7.60.0-11.49.1
7.60.0-11.49.1
curl
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 7.60.0-11.49.1
7.60.0-11.49.1
curl
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 7.37.0-37.85.1
7.37.0-37.85.1
curl
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 7.37.0-37.85.1
7.37.0-37.85.1
curl
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 7.60.0-4.43.1
7.60.0-4.43.1
curl
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 7.60.0-4.43.1
7.60.0-4.43.1
curl
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 7.60.0-4.43.1
7.60.0-4.43.1
curl
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 7.60.0-4.43.1
7.60.0-4.43.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Manager Proxy 4.1
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Manager Retail Branch Server 4.1
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Manager Server 4.1
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise Micro 5.1
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise Micro 5.2
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Enterprise Storage 7
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
openSUSE:Leap Micro 5.2
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
openSUSE:Leap 15.3
 before 7.66.0-150200.4.42.1
7.66.0-150200.4.42.1
curl
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
 before 7.60.0-150000.38.1
7.60.0-150000.38.1
curl
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 7.79.1-150400.5.9.1
7.79.1-150400.5.9.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 2 CVEs
 before 7.79.1-150400.5.9.1
7.79.1-150400.5.9.1
curl
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 7.79.1-150400.5.9.1
7.79.1-150400.5.9.1
curl
Ubuntu:Pro:14.04:LTS
 before 7.35.0-1ubuntu2.20+esm13, plus listed versions
7.32.0-1ubuntu17.33.0-1ubuntu17.34.0-1ubuntu17.35.0-1ubuntu17.35.0-1ubuntu2
Show 29 moreShow less
7.35.0-1ubuntu2.17.35.0-1ubuntu2.27.35.0-1ubuntu2.37.35.0-1ubuntu2.57.35.0-1ubuntu2.67.35.0-1ubuntu2.77.35.0-1ubuntu2.87.35.0-1ubuntu2.97.35.0-1ubuntu2.107.35.0-1ubuntu2.117.35.0-1ubuntu2.127.35.0-1ubuntu2.137.35.0-1ubuntu2.147.35.0-1ubuntu2.157.35.0-1ubuntu2.167.35.0-1ubuntu2.177.35.0-1ubuntu2.197.35.0-1ubuntu2.207.35.0-1ubuntu2.20+esm27.35.0-1ubuntu2.20+esm37.35.0-1ubuntu2.20+esm47.35.0-1ubuntu2.20+esm57.35.0-1ubuntu2.20+esm67.35.0-1ubuntu2.20+esm77.35.0-1ubuntu2.20+esm87.35.0-1ubuntu2.20+esm97.35.0-1ubuntu2.20+esm107.35.0-1ubuntu2.20+esm117.35.0-1ubuntu2.20+esm12
7.35.0-1ubuntu2.20+esm13
curl
Ubuntu:Pro:16.04:LTS
 before 7.47.0-1ubuntu2.19+esm6, plus listed versions
7.43.0-1ubuntu27.45.0-1ubuntu17.46.0-1ubuntu17.47.0-1ubuntu17.47.0-1ubuntu2
Show 22 moreShow less
7.47.0-1ubuntu2.17.47.0-1ubuntu2.27.47.0-1ubuntu2.37.47.0-1ubuntu2.47.47.0-1ubuntu2.57.47.0-1ubuntu2.67.47.0-1ubuntu2.77.47.0-1ubuntu2.87.47.0-1ubuntu2.97.47.0-1ubuntu2.117.47.0-1ubuntu2.127.47.0-1ubuntu2.137.47.0-1ubuntu2.147.47.0-1ubuntu2.157.47.0-1ubuntu2.167.47.0-1ubuntu2.187.47.0-1ubuntu2.197.47.0-1ubuntu2.19+esm17.47.0-1ubuntu2.19+esm27.47.0-1ubuntu2.19+esm37.47.0-1ubuntu2.19+esm47.47.0-1ubuntu2.19+esm5
7.47.0-1ubuntu2.19+esm6
curl
Ubuntu:18.04:LTS
 before 7.58.0-2ubuntu3.21, plus listed versions
7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu2
Show 19 moreShow less
7.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.27.58.0-2ubuntu3.37.58.0-2ubuntu3.57.58.0-2ubuntu3.67.58.0-2ubuntu3.77.58.0-2ubuntu3.87.58.0-2ubuntu3.97.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.137.58.0-2ubuntu3.147.58.0-2ubuntu3.157.58.0-2ubuntu3.167.58.0-2ubuntu3.177.58.0-2ubuntu3.187.58.0-2ubuntu3.197.58.0-2ubuntu3.20
7.58.0-2ubuntu3.21
curl
Ubuntu:20.04:LTS
 before 7.68.0-1ubuntu2.14, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 11 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.13
7.68.0-1ubuntu2.14
curl
Ubuntu:22.04:LTS
 before 7.81.0-1ubuntu1.6, plus listed versions
7.74.0-1.3ubuntu27.74.0-1.3ubuntu37.80.0-37.81.0-17.81.0-1ubuntu1.17.81.0-1ubuntu1.27.81.0-1ubuntu1.37.81.0-1ubuntu1.4
7.81.0-1ubuntu1.6
curl
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 7.58.0-2ubuntu3.21, plus listed versions
7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu2
Show 19 moreShow less
7.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.27.58.0-2ubuntu3.37.58.0-2ubuntu3.57.58.0-2ubuntu3.67.58.0-2ubuntu3.77.58.0-2ubuntu3.87.58.0-2ubuntu3.97.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.137.58.0-2ubuntu3.147.58.0-2ubuntu3.157.58.0-2ubuntu3.167.58.0-2ubuntu3.177.58.0-2ubuntu3.187.58.0-2ubuntu3.197.58.0-2ubuntu3.20
7.58.0-2ubuntu3.21
curl
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 7.68.0-1ubuntu2.14, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 11 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.13
7.68.0-1ubuntu2.14
curl
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 7.81.0-1ubuntu1.6, plus listed versions
7.74.0-1.3ubuntu27.74.0-1.3ubuntu37.80.0-37.81.0-17.81.0-1ubuntu1.17.81.0-1ubuntu1.27.81.0-1ubuntu1.37.81.0-1ubuntu1.4
7.81.0-1ubuntu1.6
mysql-5.7
Ubuntu:18.04:LTS
From an advisory covering 20 CVEs
 before 5.7.41-0ubuntu0.18.04.1, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 19 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.1
5.7.41-0ubuntu0.18.04.1
mysql-8.0
Ubuntu:20.04:LTS
From an advisory covering 20 CVEs
 before 8.0.32-0buntu0.20.04.1, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 20 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.2
8.0.32-0buntu0.20.04.1
mysql-8.0
Ubuntu:22.04:LTS
From an advisory covering 20 CVEs
 before 8.0.32-0buntu0.22.04.1, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 4 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.1
8.0.32-0buntu0.22.04.1
curl
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 7.86.0-1.1
7.86.0-1.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-32221 is a critical vulnerability (CVSS 9.8) in Haxx Curl, published October 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.09%, the 92nd percentile. Fixed in curl 7.80.0-r4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 184 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open