{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "HSTS double-free", "tracking": { "current_release_date": "2026-08-11T16:54:20+00:00", "generator": { "date": "2026-08-11T16:54:20+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2023-27537", "initial_release_date": "2023-03-20T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T16:54:20+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "dotNET 3.1", "product": { "name": "dotNET 3.1", "product_id": "dotnet-3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_dotnet:3.1" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4.z", "product": { "name": "Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.6.z", "product": { "name": "Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7", "product": { "name": "Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7.z", "product": { "name": "Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.8", "product": { "name": "Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "curl", "product": { "name": "curl", "product_id": "curl", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl" } } }, { "category": "product_version", "name": "curl-debuginfo", "product": { "name": "curl-debuginfo", "product_id": "curl-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl-debuginfo" } } }, { "category": "product_version", "name": "curl-debugsource", "product": { "name": "curl-debugsource", "product_id": "curl-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl-debugsource" } } }, { "category": "product_version", "name": "curl-minimal", "product": { "name": "curl-minimal", "product_id": "curl-minimal", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl-minimal" } } }, { "category": "product_version", "name": "curl-minimal-debuginfo", "product": { "name": "curl-minimal-debuginfo", "product_id": "curl-minimal-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl-minimal-debuginfo" } } }, { "category": "product_version", "name": "curl", "product": { "name": "curl", "product_id": "curl.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/curl?arch=src" } } }, { "category": "product_version", "name": "libcurl", "product": { "name": "libcurl", "product_id": "libcurl", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcurl" } } }, { "category": "product_version", "name": "libcurl-debuginfo", "product": { "name": "libcurl-debuginfo", "product_id": "libcurl-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcurl-debuginfo" } } }, { "category": "product_version", "name": "libcurl-devel", "product": { "name": "libcurl-devel", "product_id": "libcurl-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcurl-devel" } } }, { "category": "product_version", "name": "libcurl-minimal", "product": { "name": "libcurl-minimal", "product_id": "libcurl-minimal", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcurl-minimal" } } }, { "category": "product_version", "name": "libcurl-minimal-debuginfo", "product": { "name": "libcurl-minimal-debuginfo", "product_id": "libcurl-minimal-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo" } } }, { "category": "product_version", "name": "rh-dotnet31-curl", "product": { "name": "rh-dotnet31-curl", "product_id": "rh-dotnet31-curl", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-dotnet31-curl" } } }, { "category": "product_version", "name": "rh-dotnet31-curl", "product": { "name": "rh-dotnet31-curl", "product_id": "rh-dotnet31-curl.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-dotnet31-curl?arch=src" } } }, { "category": "product_version", "name": "rh-dotnet31-libcurl", "product": { "name": "rh-dotnet31-libcurl", "product_id": "rh-dotnet31-libcurl", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-dotnet31-libcurl" } } }, { "category": "product_version", "name": "rh-dotnet31-libcurl-devel", "product": { "name": "rh-dotnet31-libcurl-devel", "product_id": "rh-dotnet31-libcurl-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-dotnet31-libcurl-devel" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:curl" }, "product_reference": "curl", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl-debuginfo" }, "product_reference": "curl-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl-debugsource" }, "product_reference": "curl-debugsource", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl-minimal" }, "product_reference": "curl-minimal", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl-minimal-debuginfo" }, "product_reference": "curl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "curl.src as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:curl.src" }, "product_reference": "curl.src", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libcurl" }, "product_reference": "libcurl", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libcurl-debuginfo" }, "product_reference": "libcurl-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:libcurl-devel" }, "product_reference": "libcurl-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:libcurl-minimal" }, "product_reference": "libcurl-minimal", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl-minimal-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:libcurl-minimal-debuginfo" }, "product_reference": "libcurl-minimal-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "rh-dotnet31-curl as a component of dotNET 3.1", "product_id": "dotnet-3.1:rh-dotnet31-curl" }, "product_reference": "rh-dotnet31-curl", "relates_to_product_reference": "dotnet-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "rh-dotnet31-curl.src as a component of dotNET 3.1", "product_id": "dotnet-3.1:rh-dotnet31-curl.src" }, "product_reference": "rh-dotnet31-curl.src", "relates_to_product_reference": "dotnet-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "rh-dotnet31-libcurl as a component of dotNET 3.1", "product_id": "dotnet-3.1:rh-dotnet31-libcurl" }, "product_reference": "rh-dotnet31-libcurl", "relates_to_product_reference": "dotnet-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "rh-dotnet31-libcurl-devel as a component of dotNET 3.1", "product_id": "dotnet-3.1:rh-dotnet31-libcurl-devel" }, "product_reference": "rh-dotnet31-libcurl-devel", "relates_to_product_reference": "dotnet-3.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-27537", "cwe": { "id": "CWE-415", "name": "Double Free" }, "discovery_date": "2023-03-16T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "dotnet-3.1:rh-dotnet31-curl", "dotnet-3.1:rh-dotnet31-curl.src", "dotnet-3.1:rh-dotnet31-libcurl", "dotnet-3.1:rh-dotnet31-libcurl-devel", "rhel-6-els.els:curl", "rhel-6-els.els:curl-debuginfo", "rhel-6-els.els:curl.src", "rhel-6-els.els:libcurl", "rhel-6-els.els:libcurl-devel", "rhel-7-els.els:curl", "rhel-7-els.els:curl-debuginfo", "rhel-7-els.els:curl.src", "rhel-7-els.els:libcurl", "rhel-7-els.els:libcurl-devel", "rhel-8.10.z:curl", "rhel-8.10.z:curl-debuginfo", "rhel-8.10.z:curl-debugsource", "rhel-8.10.z:curl-minimal", "rhel-8.10.z:curl-minimal-debuginfo", "rhel-8.10.z:curl.src", "rhel-8.10.z:libcurl", "rhel-8.10.z:libcurl-debuginfo", "rhel-8.10.z:libcurl-devel", "rhel-8.10.z:libcurl-minimal", "rhel-8.10.z:libcurl-minimal-debuginfo", "rhel-8.2.0.z.aus:curl", "rhel-8.2.0.z.aus:curl.src", "rhel-8.2.0.z.aus:libcurl", "rhel-8.2.0.z.aus:libcurl-devel", "rhel-8.2.0.z.aus:libcurl-minimal", "rhel-8.4.0.z.eus:curl", "rhel-8.4.0.z.eus:curl-debuginfo", "rhel-8.4.0.z.eus:curl-debugsource", "rhel-8.4.0.z.eus:curl-minimal", "rhel-8.4.0.z.eus:curl-minimal-debuginfo", "rhel-8.4.0.z.eus:curl.src", "rhel-8.4.0.z.eus:libcurl", "rhel-8.4.0.z.eus:libcurl-debuginfo", "rhel-8.4.0.z.eus:libcurl-devel", "rhel-8.4.0.z.eus:libcurl-minimal", "rhel-8.4.0.z.eus:libcurl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl", "rhel-8.6.0.z.aus:curl-debuginfo", "rhel-8.6.0.z.aus:curl-debugsource", "rhel-8.6.0.z.aus:curl-minimal", "rhel-8.6.0.z.aus:curl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl.src", "rhel-8.6.0.z.aus:libcurl", "rhel-8.6.0.z.aus:libcurl-debuginfo", "rhel-8.6.0.z.aus:libcurl-devel", "rhel-8.6.0.z.aus:libcurl-minimal", "rhel-8.6.0.z.aus:libcurl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl", "rhel-8.8.0.z.eus:curl-debuginfo", "rhel-8.8.0.z.eus:curl-debugsource", "rhel-8.8.0.z.eus:curl-minimal", "rhel-8.8.0.z.eus:curl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl.src", "rhel-8.8.0.z.eus:libcurl", "rhel-8.8.0.z.eus:libcurl-debuginfo", "rhel-8.8.0.z.eus:libcurl-devel", "rhel-8.8.0.z.eus:libcurl-minimal", "rhel-8.8.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.0.0.z.eus:curl", "rhel-9.0.0.z.eus:curl-minimal", "rhel-9.0.0.z.eus:curl.src", "rhel-9.0.0.z.eus:libcurl", "rhel-9.0.0.z.eus:libcurl-devel", "rhel-9.0.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:curl", "rhel-9.2.0.z.eus:curl-debuginfo", "rhel-9.2.0.z.eus:curl-debugsource", "rhel-9.2.0.z.eus:curl-minimal", "rhel-9.2.0.z.eus:curl-minimal-debuginfo", "rhel-9.2.0.z.eus:curl.src", "rhel-9.2.0.z.eus:libcurl", "rhel-9.2.0.z.eus:libcurl-debuginfo", "rhel-9.2.0.z.eus:libcurl-devel", "rhel-9.2.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.4.z.eus:curl", "rhel-9.4.z.eus:curl-debuginfo", "rhel-9.4.z.eus:curl-debugsource", "rhel-9.4.z.eus:curl-minimal", "rhel-9.4.z.eus:curl-minimal-debuginfo", "rhel-9.4.z.eus:curl.src", "rhel-9.4.z.eus:libcurl", "rhel-9.4.z.eus:libcurl-debuginfo", "rhel-9.4.z.eus:libcurl-devel", "rhel-9.4.z.eus:libcurl-minimal", "rhel-9.4.z.eus:libcurl-minimal-debuginfo", "rhel-9.6.z.eus:curl", "rhel-9.6.z.eus:curl-debuginfo", "rhel-9.6.z.eus:curl-debugsource", "rhel-9.6.z.eus:curl-minimal", "rhel-9.6.z.eus:curl-minimal-debuginfo", "rhel-9.6.z.eus:curl.src", "rhel-9.6.z.eus:libcurl", "rhel-9.6.z.eus:libcurl-debuginfo", "rhel-9.6.z.eus:libcurl-devel", "rhel-9.6.z.eus:libcurl-minimal", "rhel-9.6.z.eus:libcurl-minimal-debuginfo", "rhel-9.7.z:curl", "rhel-9.7.z:curl-minimal", "rhel-9.7.z:curl.src", "rhel-9.7.z:libcurl", "rhel-9.7.z:libcurl-devel", "rhel-9.7.z:libcurl-minimal", "rhel-9.7:curl", "rhel-9.7:curl-minimal", "rhel-9.7:curl.src", "rhel-9.7:libcurl", "rhel-9.7:libcurl-devel", "rhel-9.7:libcurl-minimal", "rhel-9.8:curl", "rhel-9.8:curl-minimal", "rhel-9.8:curl.src", "rhel-9.8:libcurl", "rhel-9.8:libcurl-devel", "rhel-9.8:libcurl-minimal" ] } ], "notes": [ { "category": "description", "text": "A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate \"handles\". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "dotnet-3.1:rh-dotnet31-curl", "dotnet-3.1:rh-dotnet31-curl.src", "dotnet-3.1:rh-dotnet31-libcurl", "dotnet-3.1:rh-dotnet31-libcurl-devel", "rhel-6-els.els:curl", "rhel-6-els.els:curl-debuginfo", "rhel-6-els.els:curl.src", "rhel-6-els.els:libcurl", "rhel-6-els.els:libcurl-devel", "rhel-7-els.els:curl", "rhel-7-els.els:curl-debuginfo", "rhel-7-els.els:curl.src", "rhel-7-els.els:libcurl", "rhel-7-els.els:libcurl-devel", "rhel-8.10.z:curl", "rhel-8.10.z:curl-debuginfo", "rhel-8.10.z:curl-debugsource", "rhel-8.10.z:curl-minimal", "rhel-8.10.z:curl-minimal-debuginfo", "rhel-8.10.z:curl.src", "rhel-8.10.z:libcurl", "rhel-8.10.z:libcurl-debuginfo", "rhel-8.10.z:libcurl-devel", "rhel-8.10.z:libcurl-minimal", "rhel-8.10.z:libcurl-minimal-debuginfo", "rhel-8.2.0.z.aus:curl", "rhel-8.2.0.z.aus:curl.src", "rhel-8.2.0.z.aus:libcurl", "rhel-8.2.0.z.aus:libcurl-devel", "rhel-8.2.0.z.aus:libcurl-minimal", "rhel-8.4.0.z.eus:curl", "rhel-8.4.0.z.eus:curl-debuginfo", "rhel-8.4.0.z.eus:curl-debugsource", "rhel-8.4.0.z.eus:curl-minimal", "rhel-8.4.0.z.eus:curl-minimal-debuginfo", "rhel-8.4.0.z.eus:curl.src", "rhel-8.4.0.z.eus:libcurl", "rhel-8.4.0.z.eus:libcurl-debuginfo", "rhel-8.4.0.z.eus:libcurl-devel", "rhel-8.4.0.z.eus:libcurl-minimal", "rhel-8.4.0.z.eus:libcurl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl", "rhel-8.6.0.z.aus:curl-debuginfo", "rhel-8.6.0.z.aus:curl-debugsource", "rhel-8.6.0.z.aus:curl-minimal", "rhel-8.6.0.z.aus:curl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl.src", "rhel-8.6.0.z.aus:libcurl", "rhel-8.6.0.z.aus:libcurl-debuginfo", "rhel-8.6.0.z.aus:libcurl-devel", "rhel-8.6.0.z.aus:libcurl-minimal", "rhel-8.6.0.z.aus:libcurl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl", "rhel-8.8.0.z.eus:curl-debuginfo", "rhel-8.8.0.z.eus:curl-debugsource", "rhel-8.8.0.z.eus:curl-minimal", "rhel-8.8.0.z.eus:curl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl.src", "rhel-8.8.0.z.eus:libcurl", "rhel-8.8.0.z.eus:libcurl-debuginfo", "rhel-8.8.0.z.eus:libcurl-devel", "rhel-8.8.0.z.eus:libcurl-minimal", "rhel-8.8.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.0.0.z.eus:curl", "rhel-9.0.0.z.eus:curl-minimal", "rhel-9.0.0.z.eus:curl.src", "rhel-9.0.0.z.eus:libcurl", "rhel-9.0.0.z.eus:libcurl-devel", "rhel-9.0.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:curl", "rhel-9.2.0.z.eus:curl-debuginfo", "rhel-9.2.0.z.eus:curl-debugsource", "rhel-9.2.0.z.eus:curl-minimal", "rhel-9.2.0.z.eus:curl-minimal-debuginfo", "rhel-9.2.0.z.eus:curl.src", "rhel-9.2.0.z.eus:libcurl", "rhel-9.2.0.z.eus:libcurl-debuginfo", "rhel-9.2.0.z.eus:libcurl-devel", "rhel-9.2.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.4.z.eus:curl", "rhel-9.4.z.eus:curl-debuginfo", "rhel-9.4.z.eus:curl-debugsource", "rhel-9.4.z.eus:curl-minimal", "rhel-9.4.z.eus:curl-minimal-debuginfo", "rhel-9.4.z.eus:curl.src", "rhel-9.4.z.eus:libcurl", "rhel-9.4.z.eus:libcurl-debuginfo", "rhel-9.4.z.eus:libcurl-devel", "rhel-9.4.z.eus:libcurl-minimal", "rhel-9.4.z.eus:libcurl-minimal-debuginfo", "rhel-9.6.z.eus:curl", "rhel-9.6.z.eus:curl-debuginfo", "rhel-9.6.z.eus:curl-debugsource", "rhel-9.6.z.eus:curl-minimal", "rhel-9.6.z.eus:curl-minimal-debuginfo", "rhel-9.6.z.eus:curl.src", "rhel-9.6.z.eus:libcurl", "rhel-9.6.z.eus:libcurl-debuginfo", "rhel-9.6.z.eus:libcurl-devel", "rhel-9.6.z.eus:libcurl-minimal", "rhel-9.6.z.eus:libcurl-minimal-debuginfo", "rhel-9.7.z:curl", "rhel-9.7.z:curl-minimal", "rhel-9.7.z:curl.src", "rhel-9.7.z:libcurl", "rhel-9.7.z:libcurl-devel", "rhel-9.7.z:libcurl-minimal", "rhel-9.7:curl", "rhel-9.7:curl-minimal", "rhel-9.7:curl.src", "rhel-9.7:libcurl", "rhel-9.7:libcurl-devel", "rhel-9.7:libcurl-minimal", "rhel-9.8:curl", "rhel-9.8:curl-minimal", "rhel-9.8:curl.src", "rhel-9.8:libcurl", "rhel-9.8:libcurl-devel", "rhel-9.8:libcurl-minimal" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-27537" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27537" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-27537" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.6, "baseSeverity": "MEDIUM" }, "products": [ "dotnet-3.1:rh-dotnet31-curl", "dotnet-3.1:rh-dotnet31-curl.src", "dotnet-3.1:rh-dotnet31-libcurl", "dotnet-3.1:rh-dotnet31-libcurl-devel", "rhel-6-els.els:curl", "rhel-6-els.els:curl-debuginfo", "rhel-6-els.els:curl.src", "rhel-6-els.els:libcurl", "rhel-6-els.els:libcurl-devel", "rhel-7-els.els:curl", "rhel-7-els.els:curl-debuginfo", "rhel-7-els.els:curl.src", "rhel-7-els.els:libcurl", "rhel-7-els.els:libcurl-devel", "rhel-8.10.z:curl", "rhel-8.10.z:curl-debuginfo", "rhel-8.10.z:curl-debugsource", "rhel-8.10.z:curl-minimal", "rhel-8.10.z:curl-minimal-debuginfo", "rhel-8.10.z:curl.src", "rhel-8.10.z:libcurl", "rhel-8.10.z:libcurl-debuginfo", "rhel-8.10.z:libcurl-devel", "rhel-8.10.z:libcurl-minimal", "rhel-8.10.z:libcurl-minimal-debuginfo", "rhel-8.2.0.z.aus:curl", "rhel-8.2.0.z.aus:curl.src", "rhel-8.2.0.z.aus:libcurl", "rhel-8.2.0.z.aus:libcurl-devel", "rhel-8.2.0.z.aus:libcurl-minimal", "rhel-8.4.0.z.eus:curl", "rhel-8.4.0.z.eus:curl-debuginfo", "rhel-8.4.0.z.eus:curl-debugsource", "rhel-8.4.0.z.eus:curl-minimal", "rhel-8.4.0.z.eus:curl-minimal-debuginfo", "rhel-8.4.0.z.eus:curl.src", "rhel-8.4.0.z.eus:libcurl", "rhel-8.4.0.z.eus:libcurl-debuginfo", "rhel-8.4.0.z.eus:libcurl-devel", "rhel-8.4.0.z.eus:libcurl-minimal", "rhel-8.4.0.z.eus:libcurl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl", "rhel-8.6.0.z.aus:curl-debuginfo", "rhel-8.6.0.z.aus:curl-debugsource", "rhel-8.6.0.z.aus:curl-minimal", "rhel-8.6.0.z.aus:curl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl.src", "rhel-8.6.0.z.aus:libcurl", "rhel-8.6.0.z.aus:libcurl-debuginfo", "rhel-8.6.0.z.aus:libcurl-devel", "rhel-8.6.0.z.aus:libcurl-minimal", "rhel-8.6.0.z.aus:libcurl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl", "rhel-8.8.0.z.eus:curl-debuginfo", "rhel-8.8.0.z.eus:curl-debugsource", "rhel-8.8.0.z.eus:curl-minimal", "rhel-8.8.0.z.eus:curl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl.src", "rhel-8.8.0.z.eus:libcurl", "rhel-8.8.0.z.eus:libcurl-debuginfo", "rhel-8.8.0.z.eus:libcurl-devel", "rhel-8.8.0.z.eus:libcurl-minimal", "rhel-8.8.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.0.0.z.eus:curl", "rhel-9.0.0.z.eus:curl-minimal", "rhel-9.0.0.z.eus:curl.src", "rhel-9.0.0.z.eus:libcurl", "rhel-9.0.0.z.eus:libcurl-devel", "rhel-9.0.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:curl", "rhel-9.2.0.z.eus:curl-debuginfo", "rhel-9.2.0.z.eus:curl-debugsource", "rhel-9.2.0.z.eus:curl-minimal", "rhel-9.2.0.z.eus:curl-minimal-debuginfo", "rhel-9.2.0.z.eus:curl.src", "rhel-9.2.0.z.eus:libcurl", "rhel-9.2.0.z.eus:libcurl-debuginfo", "rhel-9.2.0.z.eus:libcurl-devel", "rhel-9.2.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.4.z.eus:curl", "rhel-9.4.z.eus:curl-debuginfo", "rhel-9.4.z.eus:curl-debugsource", "rhel-9.4.z.eus:curl-minimal", "rhel-9.4.z.eus:curl-minimal-debuginfo", "rhel-9.4.z.eus:curl.src", "rhel-9.4.z.eus:libcurl", "rhel-9.4.z.eus:libcurl-debuginfo", "rhel-9.4.z.eus:libcurl-devel", "rhel-9.4.z.eus:libcurl-minimal", "rhel-9.4.z.eus:libcurl-minimal-debuginfo", "rhel-9.6.z.eus:curl", "rhel-9.6.z.eus:curl-debuginfo", "rhel-9.6.z.eus:curl-debugsource", "rhel-9.6.z.eus:curl-minimal", "rhel-9.6.z.eus:curl-minimal-debuginfo", "rhel-9.6.z.eus:curl.src", "rhel-9.6.z.eus:libcurl", "rhel-9.6.z.eus:libcurl-debuginfo", "rhel-9.6.z.eus:libcurl-devel", "rhel-9.6.z.eus:libcurl-minimal", "rhel-9.6.z.eus:libcurl-minimal-debuginfo", "rhel-9.7.z:curl", "rhel-9.7.z:curl-minimal", "rhel-9.7.z:curl.src", "rhel-9.7.z:libcurl", "rhel-9.7.z:libcurl-devel", "rhel-9.7.z:libcurl-minimal", "rhel-9.7:curl", "rhel-9.7:curl-minimal", "rhel-9.7:curl.src", "rhel-9.7:libcurl", "rhel-9.7:libcurl-devel", "rhel-9.7:libcurl-minimal", "rhel-9.8:curl", "rhel-9.8:curl-minimal", "rhel-9.8:curl.src", "rhel-9.8:libcurl", "rhel-9.8:libcurl-devel", "rhel-9.8:libcurl-minimal" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "dotnet-3.1:rh-dotnet31-curl", "dotnet-3.1:rh-dotnet31-curl.src", "dotnet-3.1:rh-dotnet31-libcurl", "dotnet-3.1:rh-dotnet31-libcurl-devel", "rhel-6-els.els:curl", "rhel-6-els.els:curl-debuginfo", "rhel-6-els.els:curl.src", "rhel-6-els.els:libcurl", "rhel-6-els.els:libcurl-devel", "rhel-7-els.els:curl", "rhel-7-els.els:curl-debuginfo", "rhel-7-els.els:curl.src", "rhel-7-els.els:libcurl", "rhel-7-els.els:libcurl-devel", "rhel-8.10.z:curl", "rhel-8.10.z:curl-debuginfo", "rhel-8.10.z:curl-debugsource", "rhel-8.10.z:curl-minimal", "rhel-8.10.z:curl-minimal-debuginfo", "rhel-8.10.z:curl.src", "rhel-8.10.z:libcurl", "rhel-8.10.z:libcurl-debuginfo", "rhel-8.10.z:libcurl-devel", "rhel-8.10.z:libcurl-minimal", "rhel-8.10.z:libcurl-minimal-debuginfo", "rhel-8.2.0.z.aus:curl", "rhel-8.2.0.z.aus:curl.src", "rhel-8.2.0.z.aus:libcurl", "rhel-8.2.0.z.aus:libcurl-devel", "rhel-8.2.0.z.aus:libcurl-minimal", "rhel-8.4.0.z.eus:curl", "rhel-8.4.0.z.eus:curl-debuginfo", "rhel-8.4.0.z.eus:curl-debugsource", "rhel-8.4.0.z.eus:curl-minimal", "rhel-8.4.0.z.eus:curl-minimal-debuginfo", "rhel-8.4.0.z.eus:curl.src", "rhel-8.4.0.z.eus:libcurl", "rhel-8.4.0.z.eus:libcurl-debuginfo", "rhel-8.4.0.z.eus:libcurl-devel", "rhel-8.4.0.z.eus:libcurl-minimal", "rhel-8.4.0.z.eus:libcurl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl", "rhel-8.6.0.z.aus:curl-debuginfo", "rhel-8.6.0.z.aus:curl-debugsource", "rhel-8.6.0.z.aus:curl-minimal", "rhel-8.6.0.z.aus:curl-minimal-debuginfo", "rhel-8.6.0.z.aus:curl.src", "rhel-8.6.0.z.aus:libcurl", "rhel-8.6.0.z.aus:libcurl-debuginfo", "rhel-8.6.0.z.aus:libcurl-devel", "rhel-8.6.0.z.aus:libcurl-minimal", "rhel-8.6.0.z.aus:libcurl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl", "rhel-8.8.0.z.eus:curl-debuginfo", "rhel-8.8.0.z.eus:curl-debugsource", "rhel-8.8.0.z.eus:curl-minimal", "rhel-8.8.0.z.eus:curl-minimal-debuginfo", "rhel-8.8.0.z.eus:curl.src", "rhel-8.8.0.z.eus:libcurl", "rhel-8.8.0.z.eus:libcurl-debuginfo", "rhel-8.8.0.z.eus:libcurl-devel", "rhel-8.8.0.z.eus:libcurl-minimal", "rhel-8.8.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.0.0.z.eus:curl", "rhel-9.0.0.z.eus:curl-minimal", "rhel-9.0.0.z.eus:curl.src", "rhel-9.0.0.z.eus:libcurl", "rhel-9.0.0.z.eus:libcurl-devel", "rhel-9.0.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:curl", "rhel-9.2.0.z.eus:curl-debuginfo", "rhel-9.2.0.z.eus:curl-debugsource", "rhel-9.2.0.z.eus:curl-minimal", "rhel-9.2.0.z.eus:curl-minimal-debuginfo", "rhel-9.2.0.z.eus:curl.src", "rhel-9.2.0.z.eus:libcurl", "rhel-9.2.0.z.eus:libcurl-debuginfo", "rhel-9.2.0.z.eus:libcurl-devel", "rhel-9.2.0.z.eus:libcurl-minimal", "rhel-9.2.0.z.eus:libcurl-minimal-debuginfo", "rhel-9.4.z.eus:curl", "rhel-9.4.z.eus:curl-debuginfo", "rhel-9.4.z.eus:curl-debugsource", "rhel-9.4.z.eus:curl-minimal", "rhel-9.4.z.eus:curl-minimal-debuginfo", "rhel-9.4.z.eus:curl.src", "rhel-9.4.z.eus:libcurl", "rhel-9.4.z.eus:libcurl-debuginfo", "rhel-9.4.z.eus:libcurl-devel", "rhel-9.4.z.eus:libcurl-minimal", "rhel-9.4.z.eus:libcurl-minimal-debuginfo", "rhel-9.6.z.eus:curl", "rhel-9.6.z.eus:curl-debuginfo", "rhel-9.6.z.eus:curl-debugsource", "rhel-9.6.z.eus:curl-minimal", "rhel-9.6.z.eus:curl-minimal-debuginfo", "rhel-9.6.z.eus:curl.src", "rhel-9.6.z.eus:libcurl", "rhel-9.6.z.eus:libcurl-debuginfo", "rhel-9.6.z.eus:libcurl-devel", "rhel-9.6.z.eus:libcurl-minimal", "rhel-9.6.z.eus:libcurl-minimal-debuginfo", "rhel-9.7.z:curl", "rhel-9.7.z:curl-minimal", "rhel-9.7.z:curl.src", "rhel-9.7.z:libcurl", "rhel-9.7.z:libcurl-devel", "rhel-9.7.z:libcurl-minimal", "rhel-9.7:curl", "rhel-9.7:curl-minimal", "rhel-9.7:curl.src", "rhel-9.7:libcurl", "rhel-9.7:libcurl-devel", "rhel-9.7:libcurl-minimal", "rhel-9.8:curl", "rhel-9.8:curl-minimal", "rhel-9.8:curl.src", "rhel-9.8:libcurl", "rhel-9.8:libcurl-devel", "rhel-9.8:libcurl-minimal" ] } ], "title": "HSTS double-free" } ] }