{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.\r\nlibcurl ist eine Bibliothek f\u00fcr Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cURL und libcurl ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuf\u00fchren und um Sicherheitsmechanismen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-1237 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1237.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-1237 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1237"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:0428 vom 2024-01-25",
        "url": "https://access.redhat.com/errata/RHSA-2024:0428"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-05-17",
        "url": "https://curl.se/docs/CVE-2023-28319.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-05-17",
        "url": "https://curl.se/docs/CVE-2023-28320.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-05-17",
        "url": "https://curl.se/docs/CVE-2023-28321.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2023-05-17",
        "url": "https://curl.se/docs/CVE-2023-28322.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2224-1 vom 2023-05-17",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20232224-1/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2225-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014912.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2226-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014911.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2230-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014915.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2227-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014917.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2228-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014916.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:0585 vom 2024-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2024:0585"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-8ED627BB04 vom 2023-06-05",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-8ed627bb04"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2023-37EAC50E9B vom 2023-06-05",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-37eac50e9b"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20230609-0009 vom 2023-06-09",
        "url": "https://security.netapp.com/advisory/ntap-20230609-0009/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2224-2 vom 2023-06-21",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-June/015260.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6237-1 vom 2023-07-19",
        "url": "https://ubuntu.com/security/notices/USN-6237-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6237-2 vom 2023-07-19",
        "url": "https://ubuntu.com/security/notices/USN-6237-2"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4354 vom 2023-08-01",
        "url": "https://access.redhat.com/errata/RHSA-2023:4354"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4523 vom 2023-08-08",
        "url": "https://access.redhat.com/errata/RHSA-2023:4523"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-4523 vom 2023-08-10",
        "url": "https://linux.oracle.com/errata/ELSA-2023-4523.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-4354 vom 2023-08-10",
        "url": "https://oss.oracle.com/pipermail/el-errata/2023-August/014295.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4629 vom 2023-08-15",
        "url": "https://access.redhat.com/errata/RHSA-2023:4629"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4628 vom 2023-08-15",
        "url": "https://access.redhat.com/errata/RHSA-2023:4628"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2023.04 vom 2023-08-16",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2023-04-lantime-firmware-v7-08-002.htm"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4982 vom 2023-09-05",
        "url": "https://access.redhat.com/errata/RHSA-2023:4982"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-2230 vom 2023-09-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2230.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6237-3 vom 2023-09-11",
        "url": "https://ubuntu.com/security/notices/USN-6237-3"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3692 vom 2023-12-23",
        "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7045764 vom 2023-10-03",
        "url": "https://www.ibm.com/support/pages/node/7045764"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5598 vom 2023-10-11",
        "url": "https://access.redhat.com/errata/RHSA-2023:5598"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202310-12 vom 2023-10-11",
        "url": "https://security.gentoo.org/glsa/202310-12"
      },
      {
        "category": "external",
        "summary": "HCL Security Bulletin KB0107791 vom 2023-10-11",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0107791"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3613 vom 2023-10-11",
        "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6292 vom 2023-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2023:6292"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6842 vom 2023-11-17",
        "url": "https://access.redhat.com/errata/RHSA-2023:6842"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6841 vom 2023-11-17",
        "url": "https://access.redhat.com/errata/RHSA-2023:6841"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:1601 vom 2024-04-02",
        "url": "https://access.redhat.com/errata/RHSA-2024:1601"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-1601 vom 2024-04-03",
        "url": "https://linux.oracle.com/errata/ELSA-2024-1601.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2024:1601 vom 2024-04-05",
        "url": "https://errata.build.resf.org/RLSA-2024:1601"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7148094 vom 2024-04-11",
        "url": "https://www.ibm.com/support/pages/node/7148094"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7149801 vom 2024-04-30",
        "url": "https://www.ibm.com/support/pages/node/7149801"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:2093 vom 2024-05-01",
        "url": "https://access.redhat.com/errata/RHSA-2024:2093"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:2092 vom 2024-05-01",
        "url": "https://access.redhat.com/errata/RHSA-2024:2092"
      }
    ],
    "source_lang": "en-US",
    "title": "cURL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-05-01T22:00:00.000+00:00",
      "generator": {
        "date": "2024-05-02T08:40:38.798+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-1237",
      "initial_release_date": "2023-05-16T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-05-16T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-05-18T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-06-05T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2023-06-08T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2023-06-21T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-07-19T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-08-01T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-08-08T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-08-09T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-08-10T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-08-15T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-09-05T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-09-10T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-09-11T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-10-03T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-10-10T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-11T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-11-02T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-16T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-12-26T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2024-01-25T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-01-30T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-04-02T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-04-03T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-04-07T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2024-04-11T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-04-29T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-05-01T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "28"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.0.10",
                "product": {
                  "name": "HCL BigFix \u003c10.0.10",
                  "product_id": "T024886",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltech:bigfix:10.0.10.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.5.23",
                "product": {
                  "name": "HCL BigFix \u003c9.5.23",
                  "product_id": "T030464",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:hcltech:bigfix:9.5.23"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BigFix"
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM MQ",
            "product": {
              "name": "IBM MQ",
              "product_id": "T021398",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:mq:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c9.1.0.5",
                "product": {
                  "name": "IBM Rational ClearCase \u003c9.1.0.5",
                  "product_id": "T030198",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:rational_clearcase:9.1.0.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.0.2.8",
                "product": {
                  "name": "IBM Rational ClearCase \u003c9.0.2.8",
                  "product_id": "T030199",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:rational_clearcase:9.0.2.8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Rational ClearCase"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.08.002",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.08.002",
                  "product_id": "T029326",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.08.002"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "NetApp Data ONTAP 9",
                  "product_id": "T027038",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:data_ontap:9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Data ONTAP"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.1.0",
                "product": {
                  "name": "Open Source cURL \u003c8.1.0",
                  "product_id": "T027750",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:curl:curl:8.1.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "cURL"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.1.0",
                "product": {
                  "name": "Open Source libcurl \u003c8.1.0",
                  "product_id": "T027751",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:open_source:libcurl:8.1.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "libcurl"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat JBoss Core Services",
            "product": {
              "name": "Red Hat JBoss Core Services",
              "product_id": "T012412",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:jboss_core_services:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Container Platform 4.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.12",
                  "product_id": "T026435",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.12.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.12.43",
                  "product_id": "T031232",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.12.43"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-28319",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Wenn die libcurl Option \"CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256\" in Kombination mit einer der Optionen \"CURLOPT_VERBOSE\" oder \"CURLOPT_ERRORBUFFER\" verwendet wird, kann es zu einem Use-After-Free Fehler kommen. Ein Angreifer kann dadurch \u00fcber eine Fehlermeldung Informationen offenlegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T030464",
          "T030199",
          "67646",
          "T012412",
          "T012167",
          "T004914",
          "T032255",
          "74185",
          "T030198",
          "T031232",
          "T022954",
          "2951",
          "T002207",
          "T024886",
          "T000126",
          "398363",
          "T027038",
          "T026435",
          "T029326",
          "T021398"
        ]
      },
      "release_date": "2023-05-16T22:00:00Z",
      "title": "CVE-2023-28319"
    },
    {
      "cve": "CVE-2023-28320",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in libcurl bez\u00fcglich der Aufl\u00f6sung von Hostnamen. Wird ein \"synchronous resolver\" verwendet, kann es zum Time-Out bei der Namensaufl\u00f6sung kommen. Ein Angreifer kann dies ausnutzen, um einen Denial of Service-Zustand herbeizuf\u00fchren. Ein erfolgreiches Ausnutzen der Schwachstelle erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T030464",
          "T030199",
          "67646",
          "T012412",
          "T012167",
          "T004914",
          "T032255",
          "74185",
          "T030198",
          "T031232",
          "T022954",
          "2951",
          "T002207",
          "T024886",
          "T000126",
          "398363",
          "T027038",
          "T026435",
          "T029326",
          "T021398"
        ]
      },
      "release_date": "2023-05-16T22:00:00Z",
      "title": "CVE-2023-28320"
    },
    {
      "cve": "CVE-2023-28321",
      "notes": [
        {
          "category": "description",
          "text": "In libcurl existieren mehrere Schwachstellen im Zusammenhang mit der Validierung von Zertifikaten. Ein Angreifer kann dadurch Sicherheitsmechanismen umgehen oder ein undefiniertes Verhalten einer Anwendung, die libcurl nutzt, herbeif\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T030464",
          "T030199",
          "67646",
          "T012412",
          "T012167",
          "T004914",
          "T032255",
          "74185",
          "T030198",
          "T031232",
          "T022954",
          "2951",
          "T002207",
          "T024886",
          "T000126",
          "398363",
          "T027038",
          "T026435",
          "T029326",
          "T021398"
        ]
      },
      "release_date": "2023-05-16T22:00:00Z",
      "title": "CVE-2023-28321"
    },
    {
      "cve": "CVE-2023-28322",
      "notes": [
        {
          "category": "description",
          "text": "In libcurl existieren mehrere Schwachstellen im Zusammenhang mit der Validierung von Zertifikaten. Ein Angreifer kann dadurch Sicherheitsmechanismen umgehen oder ein undefiniertes Verhalten einer Anwendung, die libcurl nutzt, herbeif\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T030464",
          "T030199",
          "67646",
          "T012412",
          "T012167",
          "T004914",
          "T032255",
          "74185",
          "T030198",
          "T031232",
          "T022954",
          "2951",
          "T002207",
          "T024886",
          "T000126",
          "398363",
          "T027038",
          "T026435",
          "T029326",
          "T021398"
        ]
      },
      "release_date": "2023-05-16T22:00:00Z",
      "title": "CVE-2023-28322"
    }
  ]
}