Every CVE Search/ Get API key

CVE-2024-11053

netrc and redirect credential leak

3.4 LowFix available

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.97%Up 1.9 points since Dec 12, 2024
90%50%10%1%

What each source reports

CVE List Score used 3.4

netrc and redirect credential leak

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
EUVDEUVD-2024-34411 3.4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
EUVD-2024-34411
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-h288-5fq8-5pfw 9.1

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could...

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
GHSA-h288-5fq8-5pfw
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
NVD 3.4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2024-11053 3.4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
ALPINE-CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVBELL-CVE-2024-11053 3.4
Record
BELL-CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
Show 38 moreShow less
OSV 3.4

netrc and redirect credential leak

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2024-11053 3.4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
DEBIAN-CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVJLSEC-2026-413 3.4

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak...

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
JLSEC-2026-413
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1021 3.4

curl security update

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability has been found in cURL (Network Utility Software) and classified as problematic. Affected by this vulnerability is an unknown code block of the component netrc File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2024-11053)

Record
OESA-2025-1021
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1022 3.4

curl security update

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability has been found in cURL (Network Utility Software) and classified as problematic. Affected by this vulnerability is an unknown code block of the component netrc File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2024-11053)

Record
OESA-2025-1022
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1023 3.4

curl security update

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability has been found in cURL (Network Utility Software) and classified as problematic. Affected by this vulnerability is an unknown code block of the component netrc File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2024-11053)

Record
OESA-2025-1023
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1024 3.4

curl security update

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability has been found in cURL (Network Utility Software) and classified as problematic. Affected by this vulnerability is an unknown code block of the component netrc File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2024-11053)

Record
OESA-2025-1024
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2025-1025 3.4

curl security update

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.

Security Fix(es):

A vulnerability has been found in cURL (Network Utility Software) and classified as problematic. Affected by this vulnerability is an unknown code block of the component netrc File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2024-11053)

Record
OESA-2025-1025
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:1671 7.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1673 7.5

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2025:1673
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:1671 7.5

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-11053 3.4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
UBUNTU-CVE-2024-11053
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVALSA-2025:1671 No score

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1671
Updated
2026-11-02
OSVALSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1673
Updated
2026-11-02
OSVAZL-54147 No score

CVE-2024-11053 affecting package curl for versions less than 8.11.1-1

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54147
Updated
2026-11-02
OSVAZL-54155 No score

CVE-2024-11053 affecting package curl for versions less than 8.8.0-4

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54155
Updated
2026-11-02
OSVAZL-54212 No score

CVE-2024-11053 affecting package tensorflow for versions less than 2.16.1-7

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54212
Updated
2026-11-05
OSVAZL-54219 No score

CVE-2024-11053 affecting package cmake for versions less than 3.21.4-15

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54219
Updated
2026-11-02
OSVAZL-54221 No score

CVE-2024-11053 affecting package cmake for versions less than 3.30.3-3

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54221
Updated
2026-11-05
OSVAZL-54233 No score

CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54233
Updated
2026-11-02
OSVAZL-54240 No score

CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Record
AZL-54240
Updated
2026-11-02
OSVCLSA-2025-1740823577 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740823577
Updated
2026-11-02
OSVCLSA-2025-1740824456 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740824456
Updated
2026-11-02
OSVCLSA-2025-1741074282 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1741074282
Updated
2026-11-02
OSVCLSA-2025-1741637440 No score

mysql: Fix of 23 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264
Record
CLSA-2025-1741637440
Updated
2026-11-02
OSVCURL-CVE-2024-11053 No score

netrc and redirect credential leak

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.

This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits only the password or omits both login and password.

Record
CURL-CVE-2024-11053
Updated
2026-11-02
OSVMGASA-2024-0391 No score

Updated curl packages fix security vulnerability

When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password. This update fixes this logic to avoid sending a password to the wrong host.

Record
MGASA-2024-0391
Updated
2026-11-02
OSVopenSUSE-SU-2024:14575-1 No score

curl-8.11.1-1.1 on GA media

These are all security issues fixed in the curl-8.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14575-1
Updated
2026-11-02
OSVRLSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1673
Updated
2026-11-02
OSVSUSE-SU-2024:4284-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2024:4284-1
Updated
2026-11-02
OSVSUSE-SU-2024:4284-2 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2024:4284-2
Updated
2026-11-02
OSVSUSE-SU-2024:4287-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2024:4287-1
Updated
2026-11-02
OSVSUSE-SU-2024:4288-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2024:4288-1
Updated
2026-11-02
OSVSUSE-SU-2024:4359-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2024:4359-1
Updated
2026-11-02
OSVSUSE-SU-2025:20106-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)
Record
SUSE-SU-2025:20106-1
Updated
2026-11-02
OSVSUSE-SU-2025:20239-1 No score

Security update for curl

This update for curl fixes the following issues:

Update to 8.12.1:

  • Bugfixes:

    • asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
    • asyn-thread: fix HTTPS RR crash
    • asyn-thread: fix the returned bitmask from Curl_resolver_getsock
    • asyn-thread: survive a c-ares channel set to NULL
    • cmake: always reference OpenSSL and ZLIB via imported targets
    • cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
    • cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
    • content_encoding: #error on too old zlib
    • imap: TLS upgrade fix
    • ldap: drop support for legacy Novell LDAP SDK
    • libssh2: comparison is always true because rc <= -1
    • libssh2: raise lowest supported version to 1.2.8
    • libssh: drop support for libssh older than 0.9.0
    • openssl-quic: ignore ciphers for h3
    • pop3: TLS upgrade fix
    • runtests: fix the disabling of the memory tracking
    • runtests: quote commands to support paths with spaces
    • scache: add magic checks
    • smb: silence '-Warray-bounds' with gcc 13+
    • smtp: TLS upgrade fix
    • tool_cfgable: sort struct fields by size, use bitfields for booleans
    • tool_getparam: add "TLS required" flag for each such option
    • vtls: fix multissl-init
    • wakeup_write: make sure the eventfd write sends eight bytes

Update to 8.12.0:

  • Security fixes:

    • [bsc#1234068, CVE-2024-11053] curl could leak the password used for the first host to the followed-to host under certain circumstances.
    • [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
    • [bsc#1236589, CVE-2025-0665] eventfd double close

  • Changes:

    • curl: add byte range support to --variable reading from file
    • curl: make --etag-save acknowledge --create-dirs
    • getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
    • getinfo: provide info which auth was used for HTTP and proxy
    • hyper: drop support
    • openssl: add support to use keys and certificates from PKCS#11 provider
    • QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
    • vtls: feature ssls-export for SSL session im-/export

  • Bugfixes:

    • altsvc: avoid integer overflow in expire calculation
    • asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
    • asyn-ares: fix memory leak
    • asyn-ares: initial HTTPS resolve support
    • asyn-thread: use c-ares to resolve HTTPS RR
    • async-thread: avoid closing eventfd twice
    • cd2nroff: do not insist on quoted <> within backticks
    • cd2nroff: support "none" as a TLS backend
    • conncache: count shutdowns against host and max limits
    • content_encoding: drop support for zlib before 1.2.0.4
    • content_encoding: namespace GZIP flag constants
    • content_encoding: put the decomp buffers into the writer structs
    • content_encoding: support use of custom libzstd memory functions
    • cookie: cap expire times to 400 days
    • cookie: parse only the exact expire date
    • curl: return error if etag options are used with multiple URLs
    • curl_multi_fdset: include the shutdown connections in the set
    • curl_sha512_256: rename symbols to the curl namespace
    • curl_url_set.md: adjust the added-in to 7.62.0
    • doh: send HTTPS RR requests for all HTTP(S) transfers
    • easy: allow connect-only handle reuse with easy_perform
    • easy: make curl_easy_perform() return error if connection still there
    • easy_lock: use Sleep(1) for thread yield on old Windows
    • ECH: update APIs to those agreed with OpenSSL maintainers
    • GnuTLS: fix 'time_appconnect' for early data
    • HTTP/2: strip TE request header
    • http2: fix data_pending check
    • http2: fix value stored to 'result' is never read
    • http: ignore invalid Retry-After times
    • http_aws_sigv4: Fix invalid compare function handling zero-length pairs
    • https-connect: start next immediately on failure
    • lib: redirect handling by protocol handler
    • multi: fix…
Record
SUSE-SU-2025:20239-1
Updated
2026-11-02
OSVUSN-7162-1 No score

curl vulnerability

Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations.

Record
USN-7162-1
Updated
2026-11-02
OSVUSN-8525-1 No score

curl vulnerabilities

Harry Sintonen discovered that curl incorrectly handled credentials when following HTTP redirects in conjunction with .netrc files. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-11053)

Hiroki Kurosawa discovered that curl incorrectly handled OCSP stapling responses. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-8096)

Joshua Rogers discovered that curl had a use-after-free vulnerability when resetting and cleaning up HTTP/2 stream handles. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10. (CVE-2026-10536)

Quac Tran and Ngoc Hieu discovered that curl incorrectly reused connections when switching authentication methods to the same host. An attacker could possibly use this issue to obtain sensitive information or perform unauthorized actions. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-5545)

Osama Hamad discovered that curl incorrectly reused SMB connections when the target share differed between transfers. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-5773)

Muhamad Arga Reksapati discovered that curl incorrectly forwarded Digest proxy authentication credentials to a different proxy host. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-7168)

It was discovered that curl incorrectly skipped SSH host verification options when using schemeless URLs with --proto-default. An attacker could possibly use this issue to perform machine-in-the-middle attacks. This issue only affected Ubuntu 25.04 and Ubuntu 25.10. (CVE-2026-12064)

It was discovered that curl did not enforce an upper bound on memory allocated for unacknowledged WebSocket PING frames. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10. (CVE-2026-11586)

It was discovered that curl could stall indefinitely when a malicious HTTP/3 server sent a continuous stream of empty UDP datagrams. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 25.10. (CVE-2026-11352)

It was discovered that curl could incorrectly continue trusting a native platform CA store after an application switched the handle to use custom CA material. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 25.10. (CVE-2026-11564)

Record
USN-8525-1
Updated
2026-11-02

Affected products

Show 21 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
curl
Alpine:v3.18
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.19
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.20
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.21
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.22
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.23
 7.76.0 up to 8.11.1-r0
8.11.1-r0
curl
Alpine:v3.24
 7.76.0 up to 8.11.1-r0
8.11.1-r0
mysql
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-common
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-devel
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
Show 133 moreShow less
Affected packages
PackageAffectedFixed
mysql-errmsg
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-libs
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-server
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-test
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mysql
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-common
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-errmsg
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-libs
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-server
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-test
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
curl
Azure Linux:3
 before 8.11.1-1
8.11.1-1
curl
Azure Linux:2
 before 8.8.0-4
8.8.0-4
tensorflow
Azure Linux:3
 before 2.16.1-7
2.16.1-7
cmake
Azure Linux:2
 before 3.21.4-15
3.21.4-15
cmake
Azure Linux:3
 before 3.30.3-3
3.30.3-3
mysql
Azure Linux:3
 before 8.0.41-1
8.0.41-1
mysql
Azure Linux:2
 before 8.0.41-1
8.0.41-1
curl
Alpaquita:23
 8.1.0-r2 up to 8.9.1-r2
8.9.1-r2
curl
Alpaquita:stream
 8.1.2-r0 up to 8.11.1-r0
8.11.1-r0
curl
BellSoft Hardened Containers:stream
 8.1.2-r0 up to 8.11.1-r0
8.11.1-r0
mysql
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-common
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-devel
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-errmsg
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-libs
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-server
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-test
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
curl
Debian:12
 before 7.88.1-10+deb12u10, plus listed versions
7.88.1-107.88.1-10+deb12u17.88.1-10+deb12u1~bpo11+17.88.1-10+deb12u27.88.1-10+deb12u3
Show 9 moreShow less
7.88.1-10+deb12u3~bpo11+17.88.1-10+deb12u47.88.1-10+deb12u57.88.1-10+deb12u5~bpo11+17.88.1-10+deb12u67.88.1-10+deb12u6~bpo11+17.88.1-10+deb12u77.88.1-10+deb12u87.88.1-10+deb12u9
7.88.1-10+deb12u10
curl
Debian:13
 before 8.11.1-1
8.11.1-1
curl
Debian:14
 before 8.11.1-1
8.11.1-1
CURL_jll
Julia
 before 8.11.1+0
8.11.1+0
LibCURL_jll
Julia
 7.81.0+0 up to 8.11.1+0
8.11.1+0
curl
Mageia:9
 before 7.88.1-4.5.mga9
7.88.1-4.5.mga9
curl
openEuler:24.03-LTS
 before 8.4.0-14.oe2403
8.4.0-14.oe2403
curl
openEuler:22.03-LTS-SP4
 before 7.79.1-36.oe2203sp4
7.79.1-36.oe2203sp4
curl
openEuler:24.03-LTS-SP1
 before 8.4.0-14.oe2403sp1
8.4.0-14.oe2403sp1
curl
openEuler:22.03-LTS-SP3
 before 7.79.1-36.oe2203sp3
7.79.1-36.oe2203sp3
curl
openEuler:22.03-LTS-SP1
 before 7.79.1-36.oe2203sp1
7.79.1-36.oe2203sp1
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql
Rocky Linux:9
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab-ipadic
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
mysql
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
curl
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 8.0.1-11.101.1
8.0.1-11.101.1
curl
SUSE:Linux Enterprise Micro 5.1
 before 7.66.0-150200.4.81.1
7.66.0-150200.4.81.1
curl
SUSE:Linux Enterprise Micro 5.2
 before 7.66.0-150200.4.81.1
7.66.0-150200.4.81.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 8.6.0-150600.4.15.1
8.6.0-150600.4.15.1
curl
openSUSE:Leap 15.6
 before 8.6.0-150600.4.15.1
8.6.0-150600.4.15.1
curl
SUSE:Linux Enterprise Installer Updates 15 SP5
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
SUSE:Linux Enterprise Micro 5.3
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
SUSE:Linux Enterprise Micro 5.4
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
SUSE:Linux Enterprise Micro 5.5
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
openSUSE:Leap Micro 5.5
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
openSUSE:Leap 15.5
 before 8.0.1-150400.5.59.1
8.0.1-150400.5.59.1
curl
SUSE:Linux Micro 6.0
 before 8.6.0-5.1
8.6.0-5.1
curl
SUSE:Linux Micro 6.1
From an advisory covering 4 CVEs
 before 8.12.1-slfo.1.1_1.1
8.12.1-slfo.1.1_1.1
curl
Ubuntu:Pro:14.04:LTS
 before 7.35.0-1ubuntu2.20+esm21, plus listed versions
7.32.0-1ubuntu17.33.0-1ubuntu17.34.0-1ubuntu17.35.0-1ubuntu17.35.0-1ubuntu2
Show 37 moreShow less
7.35.0-1ubuntu2.17.35.0-1ubuntu2.27.35.0-1ubuntu2.37.35.0-1ubuntu2.57.35.0-1ubuntu2.67.35.0-1ubuntu2.77.35.0-1ubuntu2.87.35.0-1ubuntu2.97.35.0-1ubuntu2.107.35.0-1ubuntu2.117.35.0-1ubuntu2.127.35.0-1ubuntu2.137.35.0-1ubuntu2.147.35.0-1ubuntu2.157.35.0-1ubuntu2.167.35.0-1ubuntu2.177.35.0-1ubuntu2.197.35.0-1ubuntu2.207.35.0-1ubuntu2.20+esm27.35.0-1ubuntu2.20+esm37.35.0-1ubuntu2.20+esm47.35.0-1ubuntu2.20+esm57.35.0-1ubuntu2.20+esm67.35.0-1ubuntu2.20+esm77.35.0-1ubuntu2.20+esm87.35.0-1ubuntu2.20+esm97.35.0-1ubuntu2.20+esm107.35.0-1ubuntu2.20+esm117.35.0-1ubuntu2.20+esm127.35.0-1ubuntu2.20+esm137.35.0-1ubuntu2.20+esm147.35.0-1ubuntu2.20+esm157.35.0-1ubuntu2.20+esm167.35.0-1ubuntu2.20+esm177.35.0-1ubuntu2.20+esm187.35.0-1ubuntu2.20+esm197.35.0-1ubuntu2.20+esm20
7.35.0-1ubuntu2.20+esm21
curl
Ubuntu:Pro:16.04:LTS
 before 7.47.0-1ubuntu2.19+esm17, plus listed versions
7.43.0-1ubuntu27.45.0-1ubuntu17.46.0-1ubuntu17.47.0-1ubuntu17.47.0-1ubuntu2
Show 32 moreShow less
7.47.0-1ubuntu2.17.47.0-1ubuntu2.27.47.0-1ubuntu2.37.47.0-1ubuntu2.47.47.0-1ubuntu2.57.47.0-1ubuntu2.67.47.0-1ubuntu2.77.47.0-1ubuntu2.87.47.0-1ubuntu2.97.47.0-1ubuntu2.117.47.0-1ubuntu2.127.47.0-1ubuntu2.137.47.0-1ubuntu2.147.47.0-1ubuntu2.157.47.0-1ubuntu2.167.47.0-1ubuntu2.187.47.0-1ubuntu2.197.47.0-1ubuntu2.19+esm17.47.0-1ubuntu2.19+esm27.47.0-1ubuntu2.19+esm37.47.0-1ubuntu2.19+esm47.47.0-1ubuntu2.19+esm57.47.0-1ubuntu2.19+esm67.47.0-1ubuntu2.19+esm77.47.0-1ubuntu2.19+esm87.47.0-1ubuntu2.19+esm97.47.0-1ubuntu2.19+esm107.47.0-1ubuntu2.19+esm117.47.0-1ubuntu2.19+esm127.47.0-1ubuntu2.19+esm137.47.0-1ubuntu2.19+esm157.47.0-1ubuntu2.19+esm16
7.47.0-1ubuntu2.19+esm17
curl
Ubuntu:Pro:18.04:LTS
 before 7.58.0-2ubuntu3.24+esm10, plus listed versions
7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu2
Show 31 moreShow less
7.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.27.58.0-2ubuntu3.37.58.0-2ubuntu3.57.58.0-2ubuntu3.67.58.0-2ubuntu3.77.58.0-2ubuntu3.87.58.0-2ubuntu3.97.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.137.58.0-2ubuntu3.147.58.0-2ubuntu3.157.58.0-2ubuntu3.167.58.0-2ubuntu3.177.58.0-2ubuntu3.187.58.0-2ubuntu3.197.58.0-2ubuntu3.207.58.0-2ubuntu3.217.58.0-2ubuntu3.227.58.0-2ubuntu3.237.58.0-2ubuntu3.247.58.0-2ubuntu3.24+esm17.58.0-2ubuntu3.24+esm27.58.0-2ubuntu3.24+esm37.58.0-2ubuntu3.24+esm47.58.0-2ubuntu3.24+esm57.58.0-2ubuntu3.24+esm77.58.0-2ubuntu3.24+esm87.58.0-2ubuntu3.24+esm9
7.58.0-2ubuntu3.24+esm10
curl
Ubuntu:20.04:LTS
 before 7.68.0-1ubuntu2.25, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 21 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.137.68.0-1ubuntu2.147.68.0-1ubuntu2.157.68.0-1ubuntu2.167.68.0-1ubuntu2.187.68.0-1ubuntu2.197.68.0-1ubuntu2.207.68.0-1ubuntu2.217.68.0-1ubuntu2.227.68.0-1ubuntu2.237.68.0-1ubuntu2.24
7.68.0-1ubuntu2.25
curl
Ubuntu:22.04:LTS
 before 7.81.0-1ubuntu1.20, plus listed versions
7.74.0-1.3ubuntu27.74.0-1.3ubuntu37.80.0-37.81.0-17.81.0-1ubuntu1.1
Show 15 moreShow less
7.81.0-1ubuntu1.27.81.0-1ubuntu1.37.81.0-1ubuntu1.47.81.0-1ubuntu1.67.81.0-1ubuntu1.77.81.0-1ubuntu1.87.81.0-1ubuntu1.107.81.0-1ubuntu1.117.81.0-1ubuntu1.137.81.0-1ubuntu1.147.81.0-1ubuntu1.157.81.0-1ubuntu1.167.81.0-1ubuntu1.177.81.0-1ubuntu1.187.81.0-1ubuntu1.19
7.81.0-1ubuntu1.20
curl
Ubuntu:24.04:LTS
 before 8.5.0-2ubuntu10.6, plus listed versions
8.2.1-1ubuntu38.2.1-1ubuntu3.18.4.0-2ubuntu18.5.0-2ubuntu18.5.0-2ubuntu2
Show 8 moreShow less
8.5.0-2ubuntu88.5.0-2ubuntu98.5.0-2ubuntu108.5.0-2ubuntu10.18.5.0-2ubuntu10.28.5.0-2ubuntu10.38.5.0-2ubuntu10.48.5.0-2ubuntu10.5
8.5.0-2ubuntu10.6
curl
Ubuntu:Pro:20.04:LTS
 before 7.68.0-1ubuntu2.25+esm5, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 25 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.137.68.0-1ubuntu2.147.68.0-1ubuntu2.157.68.0-1ubuntu2.167.68.0-1ubuntu2.187.68.0-1ubuntu2.197.68.0-1ubuntu2.207.68.0-1ubuntu2.217.68.0-1ubuntu2.227.68.0-1ubuntu2.237.68.0-1ubuntu2.247.68.0-1ubuntu2.257.68.0-1ubuntu2.25+esm27.68.0-1ubuntu2.25+esm37.68.0-1ubuntu2.25+esm4
7.68.0-1ubuntu2.25+esm5
curl
Ubuntu:24.04:LTS
 before 8.5.0-2ubuntu10.11, plus listed versions
8.2.1-1ubuntu38.2.1-1ubuntu3.18.4.0-2ubuntu18.5.0-2ubuntu18.5.0-2ubuntu2
Show 13 moreShow less
8.5.0-2ubuntu88.5.0-2ubuntu98.5.0-2ubuntu108.5.0-2ubuntu10.18.5.0-2ubuntu10.28.5.0-2ubuntu10.38.5.0-2ubuntu10.48.5.0-2ubuntu10.58.5.0-2ubuntu10.68.5.0-2ubuntu10.78.5.0-2ubuntu10.88.5.0-2ubuntu10.98.5.0-2ubuntu10.10
8.5.0-2ubuntu10.11
curl
Ubuntu:25.10
 before 8.14.1-2ubuntu1.5, plus listed versions
8.12.1-3ubuntu18.13.0-5ubuntu18.14.1-1ubuntu28.14.1-1ubuntu38.14.1-2ubuntu1
Show 4 moreShow less
8.14.1-2ubuntu1.18.14.1-2ubuntu1.28.14.1-2ubuntu1.38.14.1-2ubuntu1.4
8.14.1-2ubuntu1.5
curl
Ubuntu:26.04:LTS
 before 8.18.0-1ubuntu2.3, plus listed versions
8.14.1-2ubuntu18.17.0-1ubuntu18.18.0-1ubuntu18.18.0-1ubuntu28.18.0-1ubuntu2.18.18.0-1ubuntu2.2
8.18.0-1ubuntu2.3
curl
openSUSE:Tumbleweed
 before 8.11.1-1.1
8.11.1-1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-11053 is a low vulnerability (CVSS 3.4) in Curl, published December 11, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in curl 8.11.1-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 113 references and the rest of 5 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open