Critical DLA-3398-1 4 CVEs

curl - security update

Published Apr 21, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	curl	7.64.0-4+deb10u6

Vulnerabilities 4

Critical 9.8

CVE-2023-27533

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an att…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Mar 30, 2023
High 7.7

CVE-2023-27538

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH c…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Mar 30, 2023
Medium 5.9

CVE-2023-27535

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in …

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Mar 30, 2023
Medium 5.9

CVE-2023-27536

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

Mar 30, 2023