Every CVE Search/ Get API key

CVE-2024-7264

ASN.1 date parser overread

6.5 MediumFix available

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

20.2%Up 20.2 points since Aug 1, 2024
90%50%10%1%

What each source reports

NVD Score used 6.5

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
CVE-2024-7264
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
CVE List 6.3

ASN.1 date parser overread

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
CVE-2024-7264
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
EUVDEUVD-2024-48211 6.3

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
EUVD-2024-48211
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-97c4-2w4v-c7r8 6.5

libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized...

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
GHSA-97c4-2w4v-c7r8
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2024-7264 6.5

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
ALPINE-CVE-2024-7264
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-47253 6.5

CVE-2024-7264 affecting package rust for versions less than 1.68.0-1

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
AZL-47253
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 34 moreShow less
OSVAZL-47282 6.5

CVE-2024-7264 affecting package cmake for versions less than 3.30.3-4

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
AZL-47282
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVBELL-CVE-2024-7264 6.5
Record
BELL-CVE-2024-7264
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.3

ASN.1 date parser overread

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
CVE-2024-7264
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2024-7264 6.5

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
DEBIAN-CVE-2024-7264
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-38 6.5

libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized...

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
JLSEC-2025-38
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1671 7.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1673 7.5

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2025:1673
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:1671 7.5

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-7264 6.3

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
UBUNTU-CVE-2024-7264
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:1671 No score

Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1671
Updated
2026-11-02
OSVALSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
  • krb5: GSS message token handling (CVE-2024-37371)
  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)
  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)
  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)
  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)
  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)
  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)
  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)
  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)
  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)
  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)
  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)
  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)
  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)
  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)
  • curl: curl netrc password leak (CVE-2024-11053)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)
  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)
  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)
  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)
  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)
  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)
  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)
  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)
  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)
  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)
  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)
  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)
  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)
  • mysql:…
Record
ALSA-2025:1673
Updated
2026-11-02
OSVCLSA-2024-1726313254 No score

Fix CVE(s): CVE-2024-7264

  • SECURITY UPDATE: Heap Buffer Overflow in ASN.1 Parser
    • debian/patches/CVE-2024-7264.patch: Clean up GTime2str function to handle optional fractional seconds properly. Fix GTime2str() issues and add unit tests to verify correct behaviour
    • CVE-2024-7264
Record
CLSA-2024-1726313254
Updated
2026-11-02
OSVCLSA-2024-1726773445 No score

Fix CVE(s): CVE-2024-7264

  • SECURITY UPDATE: Heap Buffer Overflow in ASN.1 Parser
    • debian/patches/CVE-2024-7264.patch: Clean up GTime2str function to handle optional fractional seconds properly. Fix GTime2str() issues and add unit tests to verify correct behaviour
    • CVE-2024-7264
Record
CLSA-2024-1726773445
Updated
2026-11-02
OSVCLSA-2025-1740823577 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740823577
Updated
2026-11-02
OSVCLSA-2025-1740824456 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1740824456
Updated
2026-11-02
OSVCLSA-2025-1741074282 No score

mysql: Fix of 49 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-5535 CVE-2024-7264 CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 CVE-2024-21203 CVE-2024-21212 CVE-2024-21213 CVE-2024-21218 CVE-2024-21219 CVE-2024-21230 CVE-2024-21231 CVE-2024-21236 CVE-2024-21237 CVE-2024-21238 CVE-2024-21239 CVE-2024-21241 CVE-2024-21247 CVE-2024-37371 CVE-2025-21490 CVE-2025-21491 CVE-2025-21494 CVE-2025-21497 CVE-2025-21500 CVE-2025-21501 CVE-2025-21503 CVE-2025-21504 CVE-2025-21505 CVE-2025-21518 CVE-2025-21519 CVE-2025-21520 CVE-2025-21521 CVE-2025-21522 CVE-2025-21523 CVE-2025-21525 CVE-2025-21529 CVE-2025-21531 CVE-2025-21534 CVE-2025-21536 CVE-2025-21540 CVE-2025-21543 CVE-2025-21546 CVE-2025-21555 CVE-2025-21559
  • Rebase mysql-mtr.patch
  • Remove mysql-fix-includes-robin-hood.patch
  • Rebase mysql-increase-wait-until-connect-timeout.patch
Record
CLSA-2025-1741074282
Updated
2026-11-02
OSVCLSA-2025-1741637440 No score

mysql: Fix of 23 CVEs

  • Update to MySQL 8.0.41
  • CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264
Record
CLSA-2025-1741637440
Updated
2026-11-02
OSVCLSA-2025-1750784906 No score

curl: Fix of CVE-2024-7264

  • CVE-2024-7264: fix out-of-bound read in GTime2str() function
Record
CLSA-2025-1750784906
Updated
2026-11-02
OSVCLSA-2025-1750785256 No score

curl: Fix of CVE-2024-7264

  • CVE-2024-7264: fix out-of-bound read in GTime2str() function
Record
CLSA-2025-1750785256
Updated
2026-11-02
OSVCLSA-2025-1751135005 No score

curl: Fix of CVE-2024-7264

  • CVE-2024-7264: fix out-of-bound read in GTime2str() function
Record
CLSA-2025-1751135005
Updated
2026-11-02
OSVCLSA-2026-1776599416 No score

curl: Fix of CVE-2024-7264

  • CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation
Record
CLSA-2026-1776599416
Updated
2026-11-02
OSVCLSA-2026-1776601980 No score

curl: Fix of CVE-2024-7264

  • CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation
Record
CLSA-2026-1776601980
Updated
2026-11-02
OSVCURL-CVE-2024-7264 No score

ASN.1 date parser overread

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null-terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.

Record
CURL-CVE-2024-7264
Updated
2026-11-02
OSVopenSUSE-SU-2024:14261-1 No score

curl-8.9.1-1.1 on GA media

These are all security issues fixed in the curl-8.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14261-1
Updated
2026-11-02
OSVRLSA-2025:1673 No score

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)

  • krb5: GSS message token handling (CVE-2024-37371)

  • curl: libcurl: ASN.1 date parser overread (CVE-2024-7264)

  • mysql: Thread Pooling unspecified vulnerability (CPU Oct 2024) (CVE-2024-21238)

  • mysql: X Plugin unspecified vulnerability (CPU Oct 2024) (CVE-2024-21196)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21241)

  • mysql: Client programs unspecified vulnerability (CPU Oct 2024) (CVE-2024-21231)

  • mysql: Information Schema unspecified vulnerability (CPU Oct 2024) (CVE-2024-21197)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21218)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21201)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21236)

  • mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21237)

  • mysql: FTS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21203)

  • mysql: Health Monitor unspecified vulnerability (CPU Oct 2024) (CVE-2024-21212)

  • mysql: DML unspecified vulnerability (CPU Oct 2024) (CVE-2024-21219)

  • mysql: Optimizer unspecified vulnerability (CPU Oct 2024) (CVE-2024-21230)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21213)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21194)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21199)

  • mysql: PS unspecified vulnerability (CPU Oct 2024) (CVE-2024-21193)

  • mysql: DDL unspecified vulnerability (CPU Oct 2024) (CVE-2024-21198)

  • mysql: mysqldump unspecified vulnerability (CPU Oct 2024) (CVE-2024-21247)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2024) (CVE-2024-21239)

  • curl: curl netrc password leak (CVE-2024-11053)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21497)

  • mysql: MySQL Server Options Vulnerability (CVE-2025-21520)

  • mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

  • mysql: Information Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21529)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21531)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21504)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21540)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21555)

  • mysql: Packaging unspecified vulnerability (CPU Jan 2025) (CVE-2025-21543)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21491)

  • mysql: DDL unspecified vulnerability (CPU Jan 2025) (CVE-2025-21525)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21536)

  • mysql: Thread Pooling unspecified vulnerability (CPU Jan 2025) (CVE-2025-21521)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21501)

  • mysql: Performance Schema unspecified vulnerability (CPU Jan 2025) (CVE-2025-21534)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21494)

  • mysql: Privileges unspecified vulnerability (CPU Jan 2025) (CVE-2025-21519)

  • mysql: Parser unspecified vulnerability (CPU Jan 2025) (CVE-2025-21522)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21503)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21518)

  • mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability (CVE-2025-21559)

  • mysql: Privilege Misuse in MySQL Server Security Component (CVE-2025-21546)

  • mysql: Optimizer unspecified vulnerability (CPU Jan 2025) (CVE-2025-21500)

  • mysql: InnoDB unspecified vulnerability (CPU Jan 2025) (CVE-2025-21523)

  • mysql: Components Services unspecified vulnerability (CPU Jan…

Record
RLSA-2025:1673
Updated
2026-11-02
OSVSUSE-SU-2024:2784-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-7264: Fixed ASN.1 date parser overread (bsc#1228535)
  • CVE-2024-6197: Fixed freeing stack buffer in utf8asn1str (bsc#1227888)
Record
SUSE-SU-2024:2784-1
Updated
2026-11-02
OSVSUSE-SU-2024:2930-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
Record
SUSE-SU-2024:2930-1
Updated
2026-11-02
OSVSUSE-SU-2024:2938-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
Record
SUSE-SU-2024:2938-1
Updated
2026-11-02
OSVSUSE-SU-2024:3080-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
Record
SUSE-SU-2024:3080-1
Updated
2026-11-02
OSVSUSE-SU-2024:3080-2 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
Record
SUSE-SU-2024:3080-2
Updated
2026-11-02
OSVSUSE-SU-2024:3202-1 No score

Security update for curl

This update for curl fixes the following issues:

  • CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)
  • CVE-2024-7264: ASN.1 date parser overread. (bsc#1228535)
Record
SUSE-SU-2024:3202-1
Updated
2026-11-02
OSVSUSE-SU-2025:20029-1 No score

Security update for curl

This update for curl fixes the following issues:

Security issues fixed:

  • CVE-2024-7264: ASN.1 date parser overread (bsc#1228535)
  • CVE-2024-6197: Freeing stack buffer in utf8asn1str (bsc#1227888)
  • CVE-2024-2379: QUIC certificate check bypass with wolfSSL (bsc#1221666)
  • CVE-2024-2466: TLS certificate check bypass with mbedTLS (bsc#1221668)
  • CVE-2024-2004: Usage of disabled protocol (bsc#1221665)
  • CVE-2024-2398: HTTP/2 push headers memory-leak (bsc#1221667)

Non-security issue fixed:

  • Fixed various TLS related issues including FTP over SSL transmission timeouts.
Record
SUSE-SU-2025:20029-1
Updated
2026-11-02
OSVUSN-6944-1 No score

curl vulnerability

Dov Murik discovered that curl incorrectly handled parsing ASN.1 Generalized Time fields. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly obtain sensitive memory contents.

Record
USN-6944-1
Updated
2026-11-02
OSVUSN-6944-2 No score

curl vulnerability

USN-6944-1 fixed CVE-2024-7264 for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.

Original advisory details:

Dov Murik discovered that curl incorrectly handled parsing ASN.1 Generalized Time fields. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly obtain sensitive memory contents.

Record
USN-6944-2
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
curl
Alpine:v3.18
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.19
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.20
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.21
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.22
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.23
 before 8.9.1-r0
8.9.1-r0
curl
Alpine:v3.24
 before 8.9.1-r0
8.9.1-r0
mysql
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-common
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-devel
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
Show 169 moreShow less
Affected packages
PackageAffectedFixed
mysql-errmsg
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-libs
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-server
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mysql-test
AlmaLinux:9
From an advisory covering 49 CVEs
 before 8.0.41-2.el9_5
8.0.41-2.el9_5
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-ipadic
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic-EUCJP
AlmaLinux:8
From an advisory covering 49 CVEs
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mysql
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-common
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-devel
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-errmsg
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-libs
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-server
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
mysql-test
AlmaLinux:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.10.0+3965+b415b607
8.0.41-1.module_el8.10.0+3965+b415b607
rust
Azure Linux:2
 before 1.68.0-1
1.68.0-1
cmake
Azure Linux:3
 before 3.30.3-4
3.30.3-4
curl
Alpaquita:23
 8.1.0-r2 up to 8.9.1-r0
8.9.1-r0
curl
Alpaquita:stream
 8.1.2-r0 up to 8.9.1-r0
8.9.1-r0
curl
BellSoft Hardened Containers:stream
 8.1.2-r0 up to 8.9.1-r0
8.9.1-r0
curl
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl3
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl3-gnutls
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl3-nss
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl4-doc
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl4-gnutls-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl4-nss-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
libcurl4-openssl-dev
TuxCare:Ubuntu:16.04
 before 7.47.0-1ubuntu2.23+tuxcare.els13
7.47.0-1ubuntu2.23+tuxcare.els13
curl
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl3-gnutls
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl3-nss
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl4
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl4-doc
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl4-gnutls-dev
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl4-nss-dev
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
libcurl4-openssl-dev
TuxCare:Ubuntu:18.04
 before 7.58.0-2ubuntu3.24+tuxcare.els6
7.58.0-2ubuntu3.24+tuxcare.els6
mysql
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-common
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-server
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql-test
TuxCare:CentOS:8.4
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
8.0.41-1.module_el8.4.0+2262+68960773.tuxcare.els1
mysql
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-common
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-devel
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-errmsg
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-libs
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-server
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql-test
TuxCare:CentOS:8.5
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
8.0.41-1.module_el8.5.0+2263+dd0000b0.tuxcare.els1
mysql
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-common
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-devel
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-errmsg
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-libs
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-server
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql-test
TuxCare:CentOS-Stream:8
From an advisory covering 49 CVEs
 before 8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
8.0.41-1.module_el8+2274+9bedbd95.tuxcare.els1
mysql
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.2
From an advisory covering 23 CVEs
 before 8.0.41-1.el9_2.tuxcare.els1
8.0.41-1.el9_2.tuxcare.els1
curl
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
curl-minimal
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl-devel
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl-minimal
TuxCare:CentOS:8.4
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
curl
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
curl-minimal
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl-devel
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
libcurl-minimal
TuxCare:CentOS:8.5
 before 7.61.1-22.el8.tuxcare.els14
7.61.1-22.el8.tuxcare.els14
curl
TuxCare:CentOS-Stream:8
 before 7.61.1-34.el8.tuxcare.els2
7.61.1-34.el8.tuxcare.els2
curl-minimal
TuxCare:CentOS-Stream:8
 before 7.61.1-34.el8.tuxcare.els2
7.61.1-34.el8.tuxcare.els2
libcurl
TuxCare:CentOS-Stream:8
 before 7.61.1-34.el8.tuxcare.els2
7.61.1-34.el8.tuxcare.els2
libcurl-devel
TuxCare:CentOS-Stream:8
 before 7.61.1-34.el8.tuxcare.els2
7.61.1-34.el8.tuxcare.els2
libcurl-minimal
TuxCare:CentOS-Stream:8
 before 7.61.1-34.el8.tuxcare.els2
7.61.1-34.el8.tuxcare.els2
curl
TuxCare:AlmaLinux:9.2
 before 7.76.1-31.el9_2.1.tuxcare.els9
7.76.1-31.el9_2.1.tuxcare.els9
curl-minimal
TuxCare:AlmaLinux:9.2
 before 7.76.1-31.el9_2.1.tuxcare.els9
7.76.1-31.el9_2.1.tuxcare.els9
libcurl
TuxCare:AlmaLinux:9.2
 before 7.76.1-31.el9_2.1.tuxcare.els9
7.76.1-31.el9_2.1.tuxcare.els9
libcurl-devel
TuxCare:AlmaLinux:9.2
 before 7.76.1-31.el9_2.1.tuxcare.els9
7.76.1-31.el9_2.1.tuxcare.els9
libcurl-minimal
TuxCare:AlmaLinux:9.2
 before 7.76.1-31.el9_2.1.tuxcare.els9
7.76.1-31.el9_2.1.tuxcare.els9
curl
TuxCare:AlmaLinux:9.6
 before 7.76.1-31.el9_6.1.tuxcare.els9
7.76.1-31.el9_6.1.tuxcare.els9
curl-minimal
TuxCare:AlmaLinux:9.6
 before 7.76.1-31.el9_6.1.tuxcare.els9
7.76.1-31.el9_6.1.tuxcare.els9
libcurl
TuxCare:AlmaLinux:9.6
 before 7.76.1-31.el9_6.1.tuxcare.els9
7.76.1-31.el9_6.1.tuxcare.els9
libcurl-devel
TuxCare:AlmaLinux:9.6
 before 7.76.1-31.el9_6.1.tuxcare.els9
7.76.1-31.el9_6.1.tuxcare.els9
libcurl-minimal
TuxCare:AlmaLinux:9.6
 before 7.76.1-31.el9_6.1.tuxcare.els9
7.76.1-31.el9_6.1.tuxcare.els9
curl
Debian:12
 before 7.88.1-10+deb12u7, plus listed versions
7.88.1-107.88.1-10+deb12u17.88.1-10+deb12u1~bpo11+17.88.1-10+deb12u27.88.1-10+deb12u3
Show 6 moreShow less
7.88.1-10+deb12u3~bpo11+17.88.1-10+deb12u47.88.1-10+deb12u57.88.1-10+deb12u5~bpo11+17.88.1-10+deb12u67.88.1-10+deb12u6~bpo11+1
7.88.1-10+deb12u7
curl
Debian:13
 before 8.9.1-1
8.9.1-1
curl
Debian:14
 before 8.9.1-1
8.9.1-1
CURL_jll
Julia
 before 8.9.1+0
8.9.1+0
LibCURL_jll
Julia
 before 8.9.1+0
8.9.1+0
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+22857+7f331edd
0:8.0.41-1.module+el8.10.0+22857+7f331edd
mysql
Rocky Linux:9
From an advisory covering 49 CVEs
 before 0:8.0.41-2.el9_5
0:8.0.41-2.el9_5
mecab
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab-ipadic
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
mysql
Rocky Linux:8
From an advisory covering 49 CVEs
 before 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 8.6.0-150600.4.3.1
8.6.0-150600.4.3.1
curl
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 8.6.0-150600.4.3.1
8.6.0-150600.4.3.1
curl
SUSE:Linux Enterprise Micro 5.1
 before 7.66.0-150200.4.75.1
7.66.0-150200.4.75.1
curl
SUSE:Linux Enterprise Micro 5.2
 before 7.66.0-150200.4.75.1
7.66.0-150200.4.75.1
curl
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 8.0.1-11.89.1
8.0.1-11.89.1
curl
SUSE:Linux Enterprise Server 12 SP5
 before 8.0.1-11.89.1
8.0.1-11.89.1
curl
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 8.0.1-11.89.1
8.0.1-11.89.1
curl
SUSE:Linux Enterprise Installer Updates 15 SP4
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Installer Updates 15 SP5
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Micro 5.3
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Micro 5.4
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Micro 5.5
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
openSUSE:Leap Micro 5.5
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
openSUSE:Leap 15.5
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Manager Proxy 4.3
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Manager Server 4.3
 before 8.0.1-150400.5.47.1
8.0.1-150400.5.47.1
curl
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 7.66.0-150200.4.78.1
7.66.0-150200.4.78.1
curl
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 7.66.0-150200.4.78.1
7.66.0-150200.4.78.1
curl
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
 before 8.6.0-3.1
8.6.0-3.1
curl
Ubuntu:Pro:14.04:LTS
 before 7.35.0-1ubuntu2.20+esm18, plus listed versions
7.32.0-1ubuntu17.33.0-1ubuntu17.34.0-1ubuntu17.35.0-1ubuntu17.35.0-1ubuntu2
Show 34 moreShow less
7.35.0-1ubuntu2.17.35.0-1ubuntu2.27.35.0-1ubuntu2.37.35.0-1ubuntu2.57.35.0-1ubuntu2.67.35.0-1ubuntu2.77.35.0-1ubuntu2.87.35.0-1ubuntu2.97.35.0-1ubuntu2.107.35.0-1ubuntu2.117.35.0-1ubuntu2.127.35.0-1ubuntu2.137.35.0-1ubuntu2.147.35.0-1ubuntu2.157.35.0-1ubuntu2.167.35.0-1ubuntu2.177.35.0-1ubuntu2.197.35.0-1ubuntu2.207.35.0-1ubuntu2.20+esm27.35.0-1ubuntu2.20+esm37.35.0-1ubuntu2.20+esm47.35.0-1ubuntu2.20+esm57.35.0-1ubuntu2.20+esm67.35.0-1ubuntu2.20+esm77.35.0-1ubuntu2.20+esm87.35.0-1ubuntu2.20+esm97.35.0-1ubuntu2.20+esm107.35.0-1ubuntu2.20+esm117.35.0-1ubuntu2.20+esm127.35.0-1ubuntu2.20+esm137.35.0-1ubuntu2.20+esm147.35.0-1ubuntu2.20+esm157.35.0-1ubuntu2.20+esm167.35.0-1ubuntu2.20+esm17
7.35.0-1ubuntu2.20+esm18
curl
Ubuntu:Pro:16.04:LTS
 before 7.47.0-1ubuntu2.19+esm13, plus listed versions
7.43.0-1ubuntu27.45.0-1ubuntu17.46.0-1ubuntu17.47.0-1ubuntu17.47.0-1ubuntu2
Show 29 moreShow less
7.47.0-1ubuntu2.17.47.0-1ubuntu2.27.47.0-1ubuntu2.37.47.0-1ubuntu2.47.47.0-1ubuntu2.57.47.0-1ubuntu2.67.47.0-1ubuntu2.77.47.0-1ubuntu2.87.47.0-1ubuntu2.97.47.0-1ubuntu2.117.47.0-1ubuntu2.127.47.0-1ubuntu2.137.47.0-1ubuntu2.147.47.0-1ubuntu2.157.47.0-1ubuntu2.167.47.0-1ubuntu2.187.47.0-1ubuntu2.197.47.0-1ubuntu2.19+esm17.47.0-1ubuntu2.19+esm27.47.0-1ubuntu2.19+esm37.47.0-1ubuntu2.19+esm47.47.0-1ubuntu2.19+esm57.47.0-1ubuntu2.19+esm67.47.0-1ubuntu2.19+esm77.47.0-1ubuntu2.19+esm87.47.0-1ubuntu2.19+esm97.47.0-1ubuntu2.19+esm107.47.0-1ubuntu2.19+esm117.47.0-1ubuntu2.19+esm12
7.47.0-1ubuntu2.19+esm13
curl
Ubuntu:Pro:18.04:LTS
 before 7.58.0-2ubuntu3.24+esm5, plus listed versions
7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu2
Show 27 moreShow less
7.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.27.58.0-2ubuntu3.37.58.0-2ubuntu3.57.58.0-2ubuntu3.67.58.0-2ubuntu3.77.58.0-2ubuntu3.87.58.0-2ubuntu3.97.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.137.58.0-2ubuntu3.147.58.0-2ubuntu3.157.58.0-2ubuntu3.167.58.0-2ubuntu3.177.58.0-2ubuntu3.187.58.0-2ubuntu3.197.58.0-2ubuntu3.207.58.0-2ubuntu3.217.58.0-2ubuntu3.227.58.0-2ubuntu3.237.58.0-2ubuntu3.247.58.0-2ubuntu3.24+esm17.58.0-2ubuntu3.24+esm27.58.0-2ubuntu3.24+esm37.58.0-2ubuntu3.24+esm4
7.58.0-2ubuntu3.24+esm5
curl
Ubuntu:20.04:LTS
 before 7.68.0-1ubuntu2.23, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 19 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.137.68.0-1ubuntu2.147.68.0-1ubuntu2.157.68.0-1ubuntu2.167.68.0-1ubuntu2.187.68.0-1ubuntu2.197.68.0-1ubuntu2.207.68.0-1ubuntu2.217.68.0-1ubuntu2.22
7.68.0-1ubuntu2.23
curl
Ubuntu:22.04:LTS
 before 7.81.0-1ubuntu1.17, plus listed versions
7.74.0-1.3ubuntu27.74.0-1.3ubuntu37.80.0-37.81.0-17.81.0-1ubuntu1.1
Show 12 moreShow less
7.81.0-1ubuntu1.27.81.0-1ubuntu1.37.81.0-1ubuntu1.47.81.0-1ubuntu1.67.81.0-1ubuntu1.77.81.0-1ubuntu1.87.81.0-1ubuntu1.107.81.0-1ubuntu1.117.81.0-1ubuntu1.137.81.0-1ubuntu1.147.81.0-1ubuntu1.157.81.0-1ubuntu1.16
7.81.0-1ubuntu1.17
curl
Ubuntu:24.04:LTS
 before 8.5.0-2ubuntu10.2, plus listed versions
8.2.1-1ubuntu38.2.1-1ubuntu3.18.4.0-2ubuntu18.5.0-2ubuntu18.5.0-2ubuntu2
Show 4 moreShow less
8.5.0-2ubuntu88.5.0-2ubuntu98.5.0-2ubuntu108.5.0-2ubuntu10.1
8.5.0-2ubuntu10.2
curl
openSUSE:Tumbleweed
 before 8.9.1-1.1
8.9.1-1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-7264 is a medium vulnerability (CVSS 6.5) in Curl, published July 31, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.2%, the 97th percentile. Fixed in curl 8.9.1-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 113 references and the rest of 4 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open