CVE-2017-2628

Description

curl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly backport the fix for CVE-2015-3148 because it did not reflect the fact that the HAVE_GSSAPI define was meanwhile substituted by USE_HTTP_NEGOTIATE. This issue was introduced in RHEL 6.7 and affects RHEL 6 curl only.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.831

Associated Vulnerability

Vulnerability	OS Platform
Vulnerability CVE-2017-2628 are affected in Curl For Windows 7.19.7	Windows
Multiple Vulnerabilities are affected in Curl For Windows 7.19.7	Windows
(RHSA-2017:0847) Moderate: curl security update curl-7.19.7-53.el6_9.i686.rpm	Linux
(RHSA-2017:0847) Moderate: curl security update curl-7.19.7-53.el6_9.x86_64.rpm	Linux
(RHSA-2017:0847) Moderate: curl security update libcurl-7.19.7-53.el6_9.i686.rpm	Linux
(RHSA-2017:0847) Moderate: curl security update libcurl-7.19.7-53.el6_9.x86_64.rpm	Linux
(RHSA-2017:0847) Moderate: curl security update libcurl-devel-7.19.7-53.el6_9.i686.rpm	Linux
(RHSA-2017:0847) Moderate: curl security update libcurl-devel-7.19.7-53.el6_9.x86_64.rpm	Linux
CVE-2017-2628	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234