Ubuntu Security Notice USN-6718-3
2024-4-29 22:48:26 Author: packetstormsecurity.com(查看原文) 阅读量:0 收藏

Ubuntu Security Notice USN-6718-3
April 29, 2024

curl vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS


Several security issues were fixed in curl.

Software Description:
- curl: HTTP, HTTPS, and FTP client and client libraries


USN-6718-1 fixed vulnerabilities in curl. This update provides the
corresponding updates for Ubuntu 24.04 LTS.

Original advisory details:

Dan Fandrich discovered that curl would incorrectly use the default set of
protocols when a parameter option disabled all protocols without adding
any, contrary to expectations. This issue only affected Ubuntu 23.10.
It was discovered that curl incorrectly handled memory when limiting the
amount of headers when HTTP/2 server push is allowed. A remote attacker
could possibly use this issue to cause curl to consume resources, leading
to a denial of service. (CVE-2024-2398)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
curl 8.5.0-2ubuntu10.1
libcurl3t64-gnutls 8.5.0-2ubuntu10.1
libcurl4t64 8.5.0-2ubuntu10.1

In general, a standard system update will make all the necessary changes.

CVE-2024-2004, CVE-2024-2398

Package Information:

文章来源: https://packetstormsecurity.com/files/178299/USN-6718-3.txt