Vulnerability Bulletins

cURL and libcurl Vulnerability Affecting Cisco Products: October 2023


System information

   
Affected software Cisco

Description

On October 11, 2023, cURL released Version 8.4.0 of the cURL utility and the libcurl library. This release addressed two security vulnerabilities: CVE-2023-38545 – High Security Impact Rating (SIR) CVE-2023-38546 – Low SIR This advisory covers CVE-2023-38545 only. For more information about this vulnerability, see the cURL advisory. This advisory is available at the following link:

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-curl-libcurl-D9ds39cV?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=cURL%20and%20libcurl%20%20Vulnerability%20Affecting%20Cisco%20Products:%20October%202023&vs_k=1

Standar resources

Property Value
CVE CVE-2023-38545 and CVE-2023-38546.

Version history

Version Comments Date
Ministerio de Defensa
CNI
CCN
CCN-CERT