USN-5788-1

Dashboard / Vulnerabilities / USN-5788-1

USN-5788-1

Summary: curl vulnerabilities

Details: Hiroki Kurosawa discovered that curl incorrectly handled HSTS support when certain hostnames included IDN characters. A remote attacker could possibly use this issue to cause curl to use unencrypted connections. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-43551) It was discovered that curl incorrectly handled denials when using HTTP proxies. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-43552)

References: https://ubuntu.com/security/notices/USN-5788-1, https://ubuntu.com/security/CVE-2022-43551, https://ubuntu.com/security/CVE-2022-43552