{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder unbekannte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0690 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0690.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0690 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0690"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:0428 vom 2024-01-25",
        "url": "https://access.redhat.com/errata/RHSA-2024:0428"
      },
      {
        "category": "external",
        "summary": "Curl 8.0.0 Release Notes vom 2023-03-19",
        "url": "https://daniel.haxx.se/blog/2023/03/20/curl-8-0-0-is-here/"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27533.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27534.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27535.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27536.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27537.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-03-19",
        "url": "https://curl.se/docs/CVE-2023-27538.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5964-1 vom 2023-03-20",
        "url": "https://ubuntu.com/security/notices/USN-5964-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0865-1 vom 2023-03-21",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014128.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-2884BA1528 vom 2023-03-24",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-2884ba1528"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-7E7414E64D vom 2023-03-24",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-7e7414e64d"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-0DE03A9232 vom 2023-03-24",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-0de03a9232"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:1582-1 vom 2023-03-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014166.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5964-2 vom 2023-03-27",
        "url": "https://ubuntu.com/security/notices/USN-5964-2"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:1711-1 vom 2023-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014291.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20230420-0012 vom 2023-04-20",
        "url": "https://security.netapp.com/advisory/ntap-20230420-0012/"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20230420-0011 vom 2023-04-20",
        "url": "https://security.netapp.com/advisory/ntap-20230420-0011/"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1729 vom 2023-04-21",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1729.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1727 vom 2023-04-21",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1727.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3398 vom 2023-04-21",
        "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6986579 vom 2023-04-29",
        "url": "https://www.ibm.com/support/pages/node/6986579"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:2650 vom 2023-05-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:2650"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3106 vom 2023-05-16",
        "url": "https://access.redhat.com/errata/RHSA-2023:3106"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2226-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014911.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2228-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014916.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-2650 vom 2023-05-18",
        "url": "https://oss.oracle.com/pipermail/el-errata/2023-May/013981.html"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2023.03 vom 2023-05-23",
        "url": "https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-03-lantime-firmware-v7-06-014.htm"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3455 vom 2023-06-06",
        "url": "https://access.redhat.com/errata/RHSA-2023:3455"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7002501 vom 2023-06-08",
        "url": "https://www.ibm.com/support/pages/node/7002501"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2023-2070 vom 2023-06-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2070.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3609 vom 2023-06-15",
        "url": "https://access.redhat.com/errata/RHSA-2023:3609"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3614 vom 2023-06-21",
        "url": "https://access.redhat.com/errata/RHSA-2023:3614"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:3342 vom 2023-06-22",
        "url": "https://access.redhat.com/errata/RHSA-2023:3342"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7008409 vom 2023-06-29",
        "url": "https://www.ibm.com/support/pages/node/7008409"
      },
      {
        "category": "external",
        "summary": "Security update for Dell NetWorker",
        "url": "https://www.dell.com/support/kbdoc/de-de/000215497/dsa-2023-233-security-update-for-dell-networker-curl-7-51-0"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4523 vom 2023-08-08",
        "url": "https://access.redhat.com/errata/RHSA-2023:4523"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-4523 vom 2023-08-10",
        "url": "https://linux.oracle.com/errata/ELSA-2023-4523.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4982 vom 2023-09-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:4982"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202310-12 vom 2023-10-11",
        "url": "https://security.gentoo.org/glsa/202310-12"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6679 vom 2023-11-07",
        "url": "https://access.redhat.com/errata/RHSA-2023:6679"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7069319 vom 2023-11-08",
        "url": "https://www.ibm.com/support/pages/node/7069319"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3763 vom 2024-03-17",
        "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2009-1 vom 2024-06-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-June/018707.html"
      }
    ],
    "source_lang": "en-US",
    "title": "cURL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-06-12T22:00:00.000+00:00",
      "generator": {
        "date": "2024-06-13T10:06:19.550+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-0690",
      "initial_release_date": "2023-03-19T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-03-19T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-03-20T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-03-21T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-26T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2023-03-27T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE und Ubuntu aufgenommen"
        },
        {
          "date": "2023-04-02T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-04-20T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2023-04-23T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-05-01T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-05-09T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-05-16T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-05-18T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE und Oracle Linux aufgenommen"
        },
        {
          "date": "2023-05-22T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2023-06-05T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-06-08T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von IBM und Amazon aufgenommen"
        },
        {
          "date": "2023-06-14T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-06-21T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-06-29T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-04T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2023-08-08T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-08-09T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-09-05T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-10T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2023-11-07T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-08T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-01-25T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-03-17T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2024-06-12T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "28"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c19.9.0.1",
                "product": {
                  "name": "Dell NetWorker \u003c19.9.0.1",
                  "product_id": "T028404",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.9.0.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3.1",
                "product": {
                  "name": "IBM AIX 7.3.1",
                  "product_id": "T028363",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9.0.0",
                "product": {
                  "name": "IBM MQ 9.0.0",
                  "product_id": "T021104",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:9.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9.2.0",
                "product": {
                  "name": "IBM MQ 9.2.0",
                  "product_id": "T021106",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:9.2.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9.3.0",
                "product": {
                  "name": "IBM MQ 9.3.0",
                  "product_id": "T026459",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:9.3.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "MQ"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cplus 10.1.15.3",
                "product": {
                  "name": "IBM Spectrum Protect \u003cplus 10.1.15.3",
                  "product_id": "T031010",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:spectrum_protect:plus_10.1.15.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Spectrum Protect"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV7.06.014",
                "product": {
                  "name": "Meinberg LANTIME \u003cV7.06.014",
                  "product_id": "T027837",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:v7.06.014"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp Data ONTAP",
            "product": {
              "name": "NetApp Data ONTAP",
              "product_id": "7654",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:data_ontap:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.0.0",
                "product": {
                  "name": "Open Source cURL \u003c8.0.0",
                  "product_id": "T026808",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:curl:curl:8.0.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "cURL"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Data Foundation 4",
                "product": {
                  "name": "Red Hat OpenShift Data Foundation 4",
                  "product_id": "T028133",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:data_foundation_4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.13.4",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.13.4",
                  "product_id": "T028225",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.13.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-27533",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Diese besteht in Verbindung mit der Komponente Telnet und ist auf die fehlerhafte Bereinigung von Eingaben zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "T021104",
          "2951",
          "T002207",
          "T026459",
          "T027837",
          "T000126",
          "T021106",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27533"
    },
    {
      "cve": "CVE-2023-27534",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Diese besteht in der SMTP-Implementierung und erm\u00f6glicht einen Path-Traversal-Angriff. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "2951",
          "T002207",
          "T027837",
          "T000126",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27534"
    },
    {
      "cve": "CVE-2023-27535",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Eine ehemalige FTP-Verbindung wird wieder aufgebaut auch wenn sich Optionen und Parameter ver\u00e4ndert haben. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "2951",
          "T002207",
          "T027837",
          "T000126",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27535"
    },
    {
      "cve": "CVE-2023-27536",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Eine ehemalige Verbindung wird wieder aufgebaut auch wenn sich GSS-Optionen und Parameter ver\u00e4ndert haben. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "2951",
          "T002207",
          "T027837",
          "T000126",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27536"
    },
    {
      "cve": "CVE-2023-27537",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Diese ist auf eine Anf\u00e4lligkeit f\u00fcr einen Double-Free bzw. einen Use-after-Free-Fehler zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstelle ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "2951",
          "T002207",
          "T027837",
          "T000126",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27537"
    },
    {
      "cve": "CVE-2023-27538",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Eine ehemalige SSH-Verbindung wird wieder aufgebaut auch wenn sich Optionen und Parameter ver\u00e4ndert haben. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T028363",
          "T028133",
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T031010",
          "74185",
          "T022954",
          "2951",
          "T002207",
          "T027837",
          "T000126",
          "T028404",
          "398363",
          "T028225"
        ]
      },
      "release_date": "2023-03-19T23:00:00Z",
      "title": "CVE-2023-27538"
    }
  ]
}