https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:21:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04304 bdu:2023-04304 https://cve.radiocsirt.org/vuln/bdu:2023-04304 https://cve.radiocsirt.org/vuln/bell-cve-2023-32001 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2023-32001 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0976 certfr-2023-avi-0976 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0976 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32001 <p>Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.</p> <p>Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32001 https://cve.radiocsirt.org/vuln/ghsa-xc3w-ghxg-pw5f <p>libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called `stat()` followed by `fopen()` in a way that made it vulnerable to a TOCTOU race condition problem.</p> <p>By exploiting this flaw, an attacker could trick the victim to create or overwrite protected files holding this data in ways it was not intended to.</p> <p>libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called `stat()` followed by `fopen()` in a way that made it vulnerable to a TOCTOU race condition problem.</p> <p>By exploiting this flaw, an attacker could trick the victim to create or overwrite protected files holding this data in ways it was not intended to.</p> https://cve.radiocsirt.org/vuln/ghsa-xc3w-ghxg-pw5f https://cve.radiocsirt.org/vuln/gsd-2023-32001 gsd-2023-32001 https://cve.radiocsirt.org/vuln/gsd-2023-32001 https://cve.radiocsirt.org/vuln/msrc_cve-2023-32001 msrc_CVE-2023-32001 https://cve.radiocsirt.org/vuln/msrc_cve-2023-32001 https://cve.radiocsirt.org/vuln/oesa-2023-1443 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: curl, openEuler:20.03-LTS-SP3: curl, openEuler:22.03-LTS: curl, openEuler:22.03-LTS-SP1: curl, openEuler:22.03-LTS-SP2: curl</p> <p>cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es): libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called `stat()` followed by `fopen()` in a way that made it vulnerable to a TOCTOU race condition problem. By exploiting this flaw, an attacker could trick the victim to create or overwrite protected files holding this data in ways it was not intended to. (CVE-2023-32001)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: curl, openEuler:20.03-LTS-SP3: curl, openEuler:22.03-LTS: curl, openEuler:22.03-LTS-SP1: curl, openEuler:22.03-LTS-SP2: curl</p> <p>cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es): libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called `stat()` followed by `fopen()` in a way that made it vulnerable to a TOCTOU race condition problem. By exploiting this flaw, an attacker could trick the victim to create or overwrite protected files holding this data in ways it was not intended to. (CVE-2023-32001)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1443 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13069-1 <p>curl-8.2.0-1.1 on GA media</p> <p>curl-8.2.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13069-1 https://cve.radiocsirt.org/vuln/suse-su-2023:2880-1 <p>Security update for curl</p> <p>Security update for curl</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2880-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1789 <p>Ein lokaler Angreifer kann eine Schwachstelle in libcurl ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libcurl ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1789