Search
Find a vulnerability
Search criteria
Related vulnerabilities
BELL-CVE-2026-92388 (CVE-2026-92388)
Vulnerability from osv_bellsoft – Published: 2026-10-15 06:06 – Updated: 2026-10-17 06:01 – Source website
VLAI
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"package": {
"ecosystem": "Alpaquita:23",
"name": "curl",
"purl": "pkg:apk/alpaquita/curl?arch=source\u0026distro=23"
},
"ranges": [
{
"events": [
{
"introduced": "8.1.0-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Alpaquita:25",
"name": "curl",
"purl": "pkg:apk/alpaquita/curl?arch=source\u0026distro=25"
},
"ranges": [
{
"events": [
{
"introduced": "8.14.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "Alpaquita:stream",
"name": "curl",
"purl": "pkg:apk/alpaquita/curl?arch=source\u0026distro=stream"
},
"ranges": [
{
"events": [
{
"introduced": "8.1.2-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "BellSoft Hardened Containers:stream",
"name": "curl",
"purl": "pkg:apk/bellsoft-hardened-containers/curl?arch=source\u0026distro=stream"
},
"ranges": [
{
"events": [
{
"introduced": "8.1.2-r0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"id": "BELL-CVE-2026-92388",
"modified": "2026-10-17T06:01:21.512040Z",
"published": "2026-10-15T06:06:13.308300Z",
"references": [
{
"type": "ADVISORY",
"url": "https://docs.bell-sw.com/security/cves/CVE-2026-92388"
}
],
"schema_version": "1.7.4",
"upstream": [
"CVE-2026-92388"
]
}
CERTFR-2026-AVI-1307
Vulnerability from certfr_avis - Published: 2026-10-14 - Updated: 2026-10-14
De multiples vulnérabilités ont été découvertes dans Curl. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Curl | cURL et libcurl | Curl versions antérieures à 8.23.0 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Curl versions ant\u00e9rieures \u00e0 8.23.0",
"product": {
"name": "cURL et libcurl",
"vendor": {
"name": "Curl",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-94265",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94265"
},
{
"name": "CVE-2026-87863",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87863"
},
{
"name": "CVE-2026-107928",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107928"
},
{
"name": "CVE-2026-86414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86414"
},
{
"name": "CVE-2026-86411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86411"
},
{
"name": "CVE-2026-87864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87864"
},
{
"name": "CVE-2020-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8177"
},
{
"name": "CVE-2026-92392",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92392"
},
{
"name": "CVE-2026-86413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86413"
},
{
"name": "CVE-2026-107929",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107929"
},
{
"name": "CVE-2026-92389",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92389"
},
{
"name": "CVE-2026-87861",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87861"
},
{
"name": "CVE-2026-92386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92386"
},
{
"name": "CVE-2026-92387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92387"
},
{
"name": "CVE-2026-12064",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
},
{
"name": "CVE-2026-92391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92391"
},
{
"name": "CVE-2026-86410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86410"
},
{
"name": "CVE-2026-86415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86415"
},
{
"name": "CVE-2026-87865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87865"
},
{
"name": "CVE-2026-87862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87862"
},
{
"name": "CVE-2026-94266",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94266"
},
{
"name": "CVE-2026-92388",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92388"
},
{
"name": "CVE-2026-86412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86412"
},
{
"name": "CVE-2026-87866",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87866"
},
{
"name": "CVE-2026-92390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92390"
},
{
"name": "CVE-2026-86409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86409"
}
],
"initial_release_date": "2026-10-14T00:00:00",
"last_revision_date": "2026-10-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1307",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Curl. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Curl",
"vendor_advisories": [
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86412",
"url": "https://curl.se/docs/CVE-2026-86412.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-107928",
"url": "https://curl.se/docs/CVE-2026-107928.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92388",
"url": "https://curl.se/docs/CVE-2026-92388.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92386",
"url": "https://curl.se/docs/CVE-2026-92386.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86411",
"url": "https://curl.se/docs/CVE-2026-86411.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-94265",
"url": "https://curl.se/docs/CVE-2026-94265.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87862",
"url": "https://curl.se/docs/CVE-2026-87862.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86410",
"url": "https://curl.se/docs/CVE-2026-86410.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-107929",
"url": "https://curl.se/docs/CVE-2026-107929.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92387",
"url": "https://curl.se/docs/CVE-2026-92387.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87864",
"url": "https://curl.se/docs/CVE-2026-87864.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87865",
"url": "https://curl.se/docs/CVE-2026-87865.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86414",
"url": "https://curl.se/docs/CVE-2026-86414.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92392",
"url": "https://curl.se/docs/CVE-2026-92392.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87866",
"url": "https://curl.se/docs/CVE-2026-87866.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92389",
"url": "https://curl.se/docs/CVE-2026-92389.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86409",
"url": "https://curl.se/docs/CVE-2026-86409.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92391",
"url": "https://curl.se/docs/CVE-2026-92391.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86413",
"url": "https://curl.se/docs/CVE-2026-86413.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-86415",
"url": "https://curl.se/docs/CVE-2026-86415.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-94266",
"url": "https://curl.se/docs/CVE-2026-94266.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87863",
"url": "https://curl.se/docs/CVE-2026-87863.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-87861",
"url": "https://curl.se/docs/CVE-2026-87861.html"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-92390",
"url": "https://curl.se/docs/CVE-2026-92390.html"
}
]
}
RHSA-2026:82895
Vulnerability from csaf_redhat - Published: 2026-10-14 11:39 - Updated: 2026-10-17 12:55Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Scope
26 vulnerabilities in this advisory, including CVE-2026-92388.
CVE-2026-92388
A flaw was found in curl. A remote malicious server can cause a Denial of Service (DoS) or memory corruption in applications that enable File Transfer Protocol (FTP) wildcard matching. When a wildcard listing operation fails, curl does not properly reset its internal callback handlers before the connection handle is reused or duplicated. An application that subsequently reuses or clones this corrupted handle may experience an immediate application crash or unsafe memory access.
6.5 (Medium)
Fixed: 13 products
https://access.redhat.com/errata/RHSA-2026:82895
UBUNTU-CVE-2026-92388 (CVE-2026-92388)
Vulnerability from osv_ubuntu – Published: 2026-10-14 06:00 – Updated: 2026-10-14 06:00 – Source website
VLAI
Details
When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via curl_easy_duphandle() copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while reconfiguring only CURLOPT_WRITEDATA (and omitting CURLOPT_WRITEFUNCTION) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer.
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "7.35.0-1ubuntu2.20+esm24"
},
{
"binary_name": "libcurl3",
"binary_version": "7.35.0-1ubuntu2.20+esm24"
},
{
"binary_name": "libcurl3-gnutls",
"binary_version": "7.35.0-1ubuntu2.20+esm24"
},
{
"binary_name": "libcurl3-nss",
"binary_version": "7.35.0-1ubuntu2.20+esm24"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@7.35.0-1ubuntu2.20+esm24?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.32.0-1ubuntu1",
"7.33.0-1ubuntu1",
"7.34.0-1ubuntu1",
"7.35.0-1ubuntu1",
"7.35.0-1ubuntu2",
"7.35.0-1ubuntu2.1",
"7.35.0-1ubuntu2.2",
"7.35.0-1ubuntu2.3",
"7.35.0-1ubuntu2.5",
"7.35.0-1ubuntu2.6",
"7.35.0-1ubuntu2.7",
"7.35.0-1ubuntu2.8",
"7.35.0-1ubuntu2.9",
"7.35.0-1ubuntu2.10",
"7.35.0-1ubuntu2.11",
"7.35.0-1ubuntu2.12",
"7.35.0-1ubuntu2.13",
"7.35.0-1ubuntu2.14",
"7.35.0-1ubuntu2.15",
"7.35.0-1ubuntu2.16",
"7.35.0-1ubuntu2.17",
"7.35.0-1ubuntu2.19",
"7.35.0-1ubuntu2.20",
"7.35.0-1ubuntu2.20+esm2",
"7.35.0-1ubuntu2.20+esm3",
"7.35.0-1ubuntu2.20+esm4",
"7.35.0-1ubuntu2.20+esm5",
"7.35.0-1ubuntu2.20+esm6",
"7.35.0-1ubuntu2.20+esm7",
"7.35.0-1ubuntu2.20+esm8",
"7.35.0-1ubuntu2.20+esm9",
"7.35.0-1ubuntu2.20+esm10",
"7.35.0-1ubuntu2.20+esm11",
"7.35.0-1ubuntu2.20+esm12",
"7.35.0-1ubuntu2.20+esm13",
"7.35.0-1ubuntu2.20+esm14",
"7.35.0-1ubuntu2.20+esm15",
"7.35.0-1ubuntu2.20+esm16",
"7.35.0-1ubuntu2.20+esm17",
"7.35.0-1ubuntu2.20+esm18",
"7.35.0-1ubuntu2.20+esm19",
"7.35.0-1ubuntu2.20+esm20",
"7.35.0-1ubuntu2.20+esm21",
"7.35.0-1ubuntu2.20+esm22",
"7.35.0-1ubuntu2.20+esm23",
"7.35.0-1ubuntu2.20+esm24"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "7.47.0-1ubuntu2.19+esm21"
},
{
"binary_name": "libcurl3",
"binary_version": "7.47.0-1ubuntu2.19+esm21"
},
{
"binary_name": "libcurl3-gnutls",
"binary_version": "7.47.0-1ubuntu2.19+esm21"
},
{
"binary_name": "libcurl3-nss",
"binary_version": "7.47.0-1ubuntu2.19+esm21"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@7.47.0-1ubuntu2.19+esm21?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.43.0-1ubuntu2",
"7.45.0-1ubuntu1",
"7.46.0-1ubuntu1",
"7.47.0-1ubuntu1",
"7.47.0-1ubuntu2",
"7.47.0-1ubuntu2.1",
"7.47.0-1ubuntu2.2",
"7.47.0-1ubuntu2.3",
"7.47.0-1ubuntu2.4",
"7.47.0-1ubuntu2.5",
"7.47.0-1ubuntu2.6",
"7.47.0-1ubuntu2.7",
"7.47.0-1ubuntu2.8",
"7.47.0-1ubuntu2.9",
"7.47.0-1ubuntu2.11",
"7.47.0-1ubuntu2.12",
"7.47.0-1ubuntu2.13",
"7.47.0-1ubuntu2.14",
"7.47.0-1ubuntu2.15",
"7.47.0-1ubuntu2.16",
"7.47.0-1ubuntu2.18",
"7.47.0-1ubuntu2.19",
"7.47.0-1ubuntu2.19+esm1",
"7.47.0-1ubuntu2.19+esm2",
"7.47.0-1ubuntu2.19+esm3",
"7.47.0-1ubuntu2.19+esm4",
"7.47.0-1ubuntu2.19+esm5",
"7.47.0-1ubuntu2.19+esm6",
"7.47.0-1ubuntu2.19+esm7",
"7.47.0-1ubuntu2.19+esm8",
"7.47.0-1ubuntu2.19+esm9",
"7.47.0-1ubuntu2.19+esm10",
"7.47.0-1ubuntu2.19+esm11",
"7.47.0-1ubuntu2.19+esm12",
"7.47.0-1ubuntu2.19+esm13",
"7.47.0-1ubuntu2.19+esm15",
"7.47.0-1ubuntu2.19+esm16",
"7.47.0-1ubuntu2.19+esm17",
"7.47.0-1ubuntu2.19+esm18",
"7.47.0-1ubuntu2.19+esm20",
"7.47.0-1ubuntu2.19+esm21"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "7.58.0-2ubuntu3.24+esm15"
},
{
"binary_name": "libcurl3-gnutls",
"binary_version": "7.58.0-2ubuntu3.24+esm15"
},
{
"binary_name": "libcurl3-nss",
"binary_version": "7.58.0-2ubuntu3.24+esm15"
},
{
"binary_name": "libcurl4",
"binary_version": "7.58.0-2ubuntu3.24+esm15"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@7.58.0-2ubuntu3.24+esm15?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.55.1-1ubuntu2",
"7.55.1-1ubuntu2.1",
"7.57.0-1ubuntu1",
"7.58.0-2ubuntu1",
"7.58.0-2ubuntu2",
"7.58.0-2ubuntu3",
"7.58.0-2ubuntu3.1",
"7.58.0-2ubuntu3.2",
"7.58.0-2ubuntu3.3",
"7.58.0-2ubuntu3.5",
"7.58.0-2ubuntu3.6",
"7.58.0-2ubuntu3.7",
"7.58.0-2ubuntu3.8",
"7.58.0-2ubuntu3.9",
"7.58.0-2ubuntu3.10",
"7.58.0-2ubuntu3.12",
"7.58.0-2ubuntu3.13",
"7.58.0-2ubuntu3.14",
"7.58.0-2ubuntu3.15",
"7.58.0-2ubuntu3.16",
"7.58.0-2ubuntu3.17",
"7.58.0-2ubuntu3.18",
"7.58.0-2ubuntu3.19",
"7.58.0-2ubuntu3.20",
"7.58.0-2ubuntu3.21",
"7.58.0-2ubuntu3.22",
"7.58.0-2ubuntu3.23",
"7.58.0-2ubuntu3.24",
"7.58.0-2ubuntu3.24+esm1",
"7.58.0-2ubuntu3.24+esm2",
"7.58.0-2ubuntu3.24+esm3",
"7.58.0-2ubuntu3.24+esm4",
"7.58.0-2ubuntu3.24+esm5",
"7.58.0-2ubuntu3.24+esm7",
"7.58.0-2ubuntu3.24+esm8",
"7.58.0-2ubuntu3.24+esm9",
"7.58.0-2ubuntu3.24+esm10",
"7.58.0-2ubuntu3.24+esm11",
"7.58.0-2ubuntu3.24+esm12",
"7.58.0-2ubuntu3.24+esm14",
"7.58.0-2ubuntu3.24+esm15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "7.68.0-1ubuntu2.25+esm10"
},
{
"binary_name": "libcurl3-gnutls",
"binary_version": "7.68.0-1ubuntu2.25+esm10"
},
{
"binary_name": "libcurl3-nss",
"binary_version": "7.68.0-1ubuntu2.25+esm10"
},
{
"binary_name": "libcurl4",
"binary_version": "7.68.0-1ubuntu2.25+esm10"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.25+esm10?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.65.3-1ubuntu3",
"7.65.3-1ubuntu4",
"7.66.0-1ubuntu1",
"7.67.0-2ubuntu1",
"7.68.0-1ubuntu1",
"7.68.0-1ubuntu2",
"7.68.0-1ubuntu2.1",
"7.68.0-1ubuntu2.2",
"7.68.0-1ubuntu2.4",
"7.68.0-1ubuntu2.5",
"7.68.0-1ubuntu2.6",
"7.68.0-1ubuntu2.7",
"7.68.0-1ubuntu2.10",
"7.68.0-1ubuntu2.11",
"7.68.0-1ubuntu2.12",
"7.68.0-1ubuntu2.13",
"7.68.0-1ubuntu2.14",
"7.68.0-1ubuntu2.15",
"7.68.0-1ubuntu2.16",
"7.68.0-1ubuntu2.18",
"7.68.0-1ubuntu2.19",
"7.68.0-1ubuntu2.20",
"7.68.0-1ubuntu2.21",
"7.68.0-1ubuntu2.22",
"7.68.0-1ubuntu2.23",
"7.68.0-1ubuntu2.24",
"7.68.0-1ubuntu2.25",
"7.68.0-1ubuntu2.25+esm2",
"7.68.0-1ubuntu2.25+esm3",
"7.68.0-1ubuntu2.25+esm4",
"7.68.0-1ubuntu2.25+esm5",
"7.68.0-1ubuntu2.25+esm6",
"7.68.0-1ubuntu2.25+esm7",
"7.68.0-1ubuntu2.25+esm9",
"7.68.0-1ubuntu2.25+esm10"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "7.81.0-1ubuntu1.30"
},
{
"binary_name": "libcurl3-gnutls",
"binary_version": "7.81.0-1ubuntu1.30"
},
{
"binary_name": "libcurl3-nss",
"binary_version": "7.81.0-1ubuntu1.30"
},
{
"binary_name": "libcurl4",
"binary_version": "7.81.0-1ubuntu1.30"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@7.81.0-1ubuntu1.30?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.74.0-1.3ubuntu2",
"7.74.0-1.3ubuntu3",
"7.80.0-3",
"7.81.0-1",
"7.81.0-1ubuntu1.1",
"7.81.0-1ubuntu1.2",
"7.81.0-1ubuntu1.3",
"7.81.0-1ubuntu1.4",
"7.81.0-1ubuntu1.6",
"7.81.0-1ubuntu1.7",
"7.81.0-1ubuntu1.8",
"7.81.0-1ubuntu1.10",
"7.81.0-1ubuntu1.11",
"7.81.0-1ubuntu1.13",
"7.81.0-1ubuntu1.14",
"7.81.0-1ubuntu1.15",
"7.81.0-1ubuntu1.16",
"7.81.0-1ubuntu1.17",
"7.81.0-1ubuntu1.18",
"7.81.0-1ubuntu1.19",
"7.81.0-1ubuntu1.20",
"7.81.0-1ubuntu1.21",
"7.81.0-1ubuntu1.22",
"7.81.0-1ubuntu1.23",
"7.81.0-1ubuntu1.24",
"7.81.0-1ubuntu1.25",
"7.81.0-1ubuntu1.26",
"7.81.0-1ubuntu1.27",
"7.81.0-1ubuntu1.29",
"7.81.0-1ubuntu1.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "8.5.0-2ubuntu10.16"
},
{
"binary_name": "libcurl3t64-gnutls",
"binary_version": "8.5.0-2ubuntu10.16"
},
{
"binary_name": "libcurl4t64",
"binary_version": "8.5.0-2ubuntu10.16"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@8.5.0-2ubuntu10.16?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.2.1-1ubuntu3",
"8.2.1-1ubuntu3.1",
"8.4.0-2ubuntu1",
"8.5.0-2ubuntu1",
"8.5.0-2ubuntu2",
"8.5.0-2ubuntu8",
"8.5.0-2ubuntu9",
"8.5.0-2ubuntu10",
"8.5.0-2ubuntu10.1",
"8.5.0-2ubuntu10.2",
"8.5.0-2ubuntu10.3",
"8.5.0-2ubuntu10.4",
"8.5.0-2ubuntu10.5",
"8.5.0-2ubuntu10.6",
"8.5.0-2ubuntu10.7",
"8.5.0-2ubuntu10.8",
"8.5.0-2ubuntu10.9",
"8.5.0-2ubuntu10.10",
"8.5.0-2ubuntu10.11",
"8.5.0-2ubuntu10.12",
"8.5.0-2ubuntu10.13",
"8.5.0-2ubuntu10.15",
"8.5.0-2ubuntu10.16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "curl",
"binary_version": "8.20.0-2ubuntu11"
},
{
"binary_name": "libcurl3t64-gnutls",
"binary_version": "8.20.0-2ubuntu11"
},
{
"binary_name": "libcurl4t64",
"binary_version": "8.20.0-2ubuntu11"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:26.10",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@8.20.0-2ubuntu11?arch=source\u0026distro=stonking"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.18.0-1ubuntu2",
"8.20.0-2ubuntu1",
"8.20.0-2ubuntu3",
"8.20.0-2ubuntu10",
"8.20.0-2ubuntu11"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "curl",
"binary_version": "8.18.0-1ubuntu2.8"
},
{
"binary_name": "libcurl3t64-gnutls",
"binary_version": "8.18.0-1ubuntu2.8"
},
{
"binary_name": "libcurl4t64",
"binary_version": "8.18.0-1ubuntu2.8"
}
],
"priority_reason": "Upstream defined this as low severity"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "curl",
"purl": "pkg:deb/ubuntu/curl@8.18.0-1ubuntu2.8?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.18.0-1ubuntu2.8"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8.14.1-2ubuntu1",
"8.17.0-1ubuntu1",
"8.18.0-1ubuntu1",
"8.18.0-1ubuntu2",
"8.18.0-1ubuntu2.1",
"8.18.0-1ubuntu2.2",
"8.18.0-1ubuntu2.3",
"8.18.0-1ubuntu2.4",
"8.18.0-1ubuntu2.5",
"8.18.0-1ubuntu2.7"
]
}
],
"aliases": [],
"details": "When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while reconfiguring only `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer.",
"id": "UBUNTU-CVE-2026-92388",
"modified": "2026-10-14T06:00:00Z",
"published": "2026-10-14T06:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-92388"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92388"
},
{
"type": "REPORT",
"url": "https://curl.se/docs/CVE-2026-92388.html"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8927-1"
}
],
"related": [
"USN-8927-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "low",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-92388"
]
}