Red Hat, Inc. Vulnerabilities and Affected Products
Vulnerabilities associated with curl.
Products
Clear product- keycloak6 vulnerabilities
- 389-ds-base3 vulnerabilities
- ceph3 vulnerabilities
- Gluster Storage for RHEL 63 vulnerabilities
- postgresql3 vulnerabilities
- resteasy3 vulnerabilities
- Ansible Tower2 vulnerabilities
- etcd2 vulnerabilities
- GlusterFS2 vulnerabilities
- Moodle2 vulnerabilities
- Wildfly2 vulnerabilities
- ansible1 vulnerability
- atomic-openshift1 vulnerability
- augeas1 vulnerability
- Cairo1 vulnerability
- CloudForms1 vulnerability
- curl1 vulnerability
- cygwin1 vulnerability
- dnsdist1 vulnerability
- DPDK1 vulnerability
- EAP-51 vulnerability
- fedora-arm-installer1 vulnerability
- hawtio1 vulnerability
- hibernate-validator1 vulnerability
- HornetQ/Artemis1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-2628CRITICAL | curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by USE_HTTP_NEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl only. CWE-287Mar 12, 2018 | CVSS9.8v3.0 | EPSS3.87% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |