Skip to content
OpenAdvisories
Unscored DSA-2398-1 2 CVEs

curl - several

Published Jan 30, 2012 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 curl 7.18.2-8lenny6
Debian · 6.0 curl 7.21.0-2.1+squeeze1

Vulnerabilities 2

  • Unscored —
    CVE-2011-3389 Public exploit EPSS 73%

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

  • Unscored —
    CVE-2012-0036 EPSS 16%

    curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a …