[Git][security-tracker-team/security-tracker][master] Add new curl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48dffac1 by Salvatore Bonaccorso at 2024-03-27T09:30:38+01:00
Add new curl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,33 @@
+CVE-2024-2004 [Usage of disabled protocol]
+	- curl <unfixed>
+	[bookworm] - curl <no-dsa> (Minor issue)
+	[bullseye] - curl <not-affected> (Vulnerable code not present)
+	[buster] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2024-2004.html
+	NOTE: Introduced by: https://github.com/curl/curl/commit/e6f8445edef8e7996d1cfb141d6df184efef972c (curl-7_85_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/17d302e56221f5040092db77d4f85086e8a20e0e (curl-8_7_0)
+CVE-2024-2379 [QUIC certificate check bypass with wolfSSL]
+	- curl <unfixed> (unimportant)
+	NOTE: https://curl.se/docs/CVE-2024-2379.html
+	NOTE: Introduced by: https://github.com/curl/curl/commit/5d044ad9480a9f556f4b6a252d7533b1ba7fe57e (curl-8_6_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/aedbbdf18e689a5eee8dc39600914f5eda6c409c (curl-8_7_0)
+	NOTE: curl in Debian not built with wolfSSL support
+CVE-2024-2398 [HTTP/2 push headers memory-leak]
+	- curl <unfixed>
+	[bookworm] - curl <no-dsa> (Minor issue)
+	[bullseye] - curl <no-dsa> (Minor issue)
+	NOTE: https://curl.se/docs/CVE-2024-2398.html
+	NOTE: Introduced by: https://github.com/curl/curl/commit/ea7134ac874a66107e54ff93657ac565cf2ec4aa (curl-7_44_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/deca8039991886a559b67bcd6701db800a5cf764 (curl-8_7_0)
+CVE-2024-2466 [TLS certificate check bypass with mbedTLS]
+	- curl <unfixed> (unimportant)
+	[bookworm] - curl <not-affected> (Vulnerable code not present)
+	[bullseye] - curl <not-affected> (Vulnerable code not present)
+	[buster] - curl <not-affected> (Vulnerable code not present)
+	NOTE: https://curl.se/docs/CVE-2024-2466.html
+	NOTE: Introduced by: https://github.com/curl/curl/commit/fa714830e92cba7b16b9d3f2cc92a72ee9d821fa (curl-8_5_0)
+	NOTE: Fixed by: https://github.com/curl/curl/commit/3d0fd382a29b95561b90b7ea3e7eb04dfdd43538 (curl-8_7_0)
+	NOTE: curl in Debian not built with mbedTLS support
 CVE-2024-30201 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-30199 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -62,12 +92,6 @@ CVE-2024-2903 (A vulnerability was found in Tenda AC7 15.03.06.44. It has been c
 	NOT-FOR-US: Tenda
 CVE-2024-2781 (The Elementor Website Builder Pro plugin for WordPress is vulnerable t ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2024-2466 (libcurl did not check the server certificate of TLS connections done t ...)
-	TODO: check
-CVE-2024-2398 (When an application tells libcurl it wants to allow HTTP/2 server push ...)
-	TODO: check
-CVE-2024-2379 (libcurl skips the certificate verification for a QUIC connection under ...)
-	TODO: check
 CVE-2024-2244 (REST service authentication anomaly with \u201cvalid username/no passw ...)
 	TODO: check
 CVE-2024-2210 (The The Plus Addons for Elementor plugin for WordPress is vulnerable t ...)
@@ -86,8 +110,6 @@ CVE-2024-2120 (The Elementor Website Builder \u2013 More than Just a Page Builde
 	TODO: check
 CVE-2024-2097 (Authenticated List control client can execute the LINQ query in SCM Se ...)
 	TODO: check
-CVE-2024-2004 (When a protocol selection parameter option disables all protocols with ...)
-	TODO: check
 CVE-2024-29928 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2024-29927 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48dffac1131c4e1089b0bdd8245e56c530701aab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48dffac1131c4e1089b0bdd8245e56c530701aab
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240327/9f0616ce/attachment-0001.htm>