CVE catalog

CVE-2017-1000100

curl: CVE-2017-1000100

Severity: Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Published: Aug 8, 2017, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 3.96% · Oct 25, 2026

When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	curl	sid	`8.23.0-1`	fixed
Debian	curl	forky	`8.22.0-1`	fixed
Debian	curl	trixie	`8.14.1-2+deb13u5`	fixed
Debian	curl	trixie-security	`8.14.1-2+deb13u7`	fixed
Debian	curl	bookworm	`7.88.1-10+deb12u15`	fixed
Debian	curl	bookworm-security	`7.88.1-10+deb12u5`	fixed
Alpine	curl	3.10	`7.55.0-r0`	fixed
Alpine	curl	3.11	`7.55.0-r0`	fixed
Alpine	curl	3.12	`7.55.0-r0`	fixed
Alpine	curl	3.13	`7.55.0-r0`	fixed
Alpine	curl	3.14	`7.55.0-r0`	fixed
Alpine	curl	3.15	`7.55.0-r0`	fixed
Alpine	curl	3.16	`7.55.0-r0`	fixed
Alpine	curl	3.17	`7.55.0-r0`	fixed
Alpine	curl	3.18	`7.55.0-r0`	fixed
Alpine	curl	3.19	`7.55.0-r0`	fixed
Alpine	curl	3.20	`7.55.0-r0`	fixed
Alpine	curl	3.21	`7.55.0-r0`	fixed
Alpine	curl	3.22	`7.55.0-r0`	fixed
Alpine	curl	3.23	`7.55.0-r0`	fixed
Alpine	curl	3.24	`7.55.0-r0`	fixed
Alpine	curl	3.3	`7.55.0-r0`	fixed
Alpine	curl	3.4	`7.55.0-r0`	fixed
Alpine	curl	3.5	`7.55.0-r0`	fixed
Alpine	curl	3.6	`7.55.0-r0`	fixed
Alpine	curl	3.7	`7.55.0-r0`	fixed
Alpine	curl	3.8	`7.55.0-r0`	fixed
Alpine	curl	3.9	`7.55.0-r0`	fixed
Ubuntu	curl	14.04	`7.32.0-1ubuntu1`	vulnerable
Ubuntu	curl	14.04	`7.33.0-1ubuntu1`	vulnerable
Ubuntu	curl	14.04	`7.34.0-1ubuntu1`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu1`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.1`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.2`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.3`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.5`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.6`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.7`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.8`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.9`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.10`	vulnerable
Ubuntu	curl	14.04	`7.35.0-1ubuntu2.11`	fixed
Ubuntu	curl	16.04	`7.43.0-1ubuntu2`	vulnerable
Ubuntu	curl	16.04	`7.45.0-1ubuntu1`	vulnerable
Ubuntu	curl	16.04	`7.46.0-1ubuntu1`	vulnerable
Ubuntu	curl	16.04	`7.47.0-1ubuntu1`	vulnerable
Ubuntu	curl	16.04	`7.47.0-1ubuntu2`	vulnerable
Ubuntu	curl	16.04	`7.47.0-1ubuntu2.1`	vulnerable
Ubuntu	curl	16.04	`7.47.0-1ubuntu2.2`	vulnerable
Ubuntu	curl	16.04	`7.47.0-1ubuntu2.3`	fixed
Suse	curl	linux enterprise desktop 12 sp2	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise desktop 12 sp3	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise server for raspberry pi 12 sp2	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise software development kit 12 sp2	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise software development kit 12 sp3	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise server 12 sp2	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise server for sap applications 12 sp2	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise server 12 sp3	`7.37.0-37.3.1`	fixed
Suse	curl	linux enterprise server for sap applications 12 sp3	`7.37.0-37.3.1`	fixed
Suse	curl	studio onsite 1.3	`7.19.7-1.20.53.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	curl	source	sid	`7.55.0-1`	not yet assigned	Not reported	[871555]
Debian	curl	source	forky	`7.55.0-1`	not yet assigned	Not reported	[871555]
Debian	curl	source	trixie	`7.55.0-1`	not yet assigned	Not reported	[871555]
Debian	curl	source	bookworm	`7.55.0-1`	not yet assigned	Not reported	[871555]
Alpine	curl	apk	3.10	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.11	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.12	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.13	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.14	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.15	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.16	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.17	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.18	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.19	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.20	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.21	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.22	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.23	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.24	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.3	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.4	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.5	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.6	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.7	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.8	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Alpine	curl	apk	3.9	`7.55.0-r0`	Not reported	ALPINE-CVE-2017-1000100	Not reported
Ubuntu	curl	deb	14.04	`7.35.0-1ubuntu2.11`	Not reported	UBUNTU-CVE-2017-1000100	Not reported
Ubuntu	curl	deb	16.04	`7.47.0-1ubuntu2.3`	Not reported	UBUNTU-CVE-2017-1000100	Not reported
Suse	curl	rpm	linux enterprise desktop 12 sp2	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise desktop 12 sp3	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise server for raspberry pi 12 sp2	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise software development kit 12 sp2	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise software development kit 12 sp3	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise server 12 sp2	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise server for sap applications 12 sp2	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise server 12 sp3	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	linux enterprise server for sap applications 12 sp3	`7.37.0-37.3.1`	Not reported	SUSE-SU-2017:2174-1	Not reported
Suse	curl	rpm	studio onsite 1.3	`7.19.7-1.20.53.3.1`	Not reported	SUSE-SU-2017:2354-1	Not reported

[Debian bug #871555]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[curl]Unknown
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl3-gnutls]Unknown
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl3-nss]Unknown
Source package: [curl]
Details (4)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl4]Unknown
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl4-doc]Unknown
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · all · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · all · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · all · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · all · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · all · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl4-gnutls-dev]Unknown
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl4-nss-dev]Unknown
Source package: [curl]
Details (4)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
[libcurl4-openssl-dev]Unknown
Source package: [curl]
Details (6)
- 7.88.1-10+deb12u15 · amd64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u15 · arm64 · bookworm
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · amd64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 8.14.1-2+deb13u2~bpo13+1 · arm64 · bookworm-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · amd64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12
- 7.88.1-10+deb12u5 · arm64 · bookworm-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · bookworm; dsa · curl · debian · 12

[Debian 13 (Trixie)]

[curl]Unknown
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl3t64-gnutls]Unknown
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl4-doc]Unknown
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · all · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · all · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · all · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl4-gnutls]Unknown
Source package: [curl]
Details (2)
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl4-gnutls-dev]Unknown
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl4-openssl-dev]Unknown
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
[libcurl4t64]Unknown
Source package: [curl]
Details (5)
- 8.14.1-2+deb13u4 · amd64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u4 · arm64 · trixie
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.21.0-2~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13
- 8.14.1-2+deb13u7 · amd64 · trixie-security
  Fixed · Fixed: 7.55.0-1
  dsa · curl · debian · 13

Observed: Oct 23, 2026, 5:24:41 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]