rpm package
suse/curl&distro=SUSE Linux Micro 6.0
pkg:rpm/suse/curl&distro=SUSE%20Linux%20Micro%206.0
Vulnerabilities (22)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2398 | — | < 8.6.0-3.1 | 8.6.0-3.1 | Mar 27, 2024 | When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated head | ||
| CVE-2024-2004 | — | < 8.6.0-3.1 | 8.6.0-3.1 | Mar 27, 2024 | When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protoc |
- CVE-2024-2398Mar 27, 2024affected < 8.6.0-3.1fixed 8.6.0-3.1
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated head
- CVE-2024-2004Mar 27, 2024affected < 8.6.0-3.1fixed 8.6.0-3.1
When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protoc
Page 2 of 2