An update of the curl package has been released.

The version of Curl installed on the remote host is between 7.74.0 and prior to 8.10.1. It is, therefore, affected by a potential minor DoS security problem when trying to use HTTPS when that no longer works or a cleartext transmission of data that was otherwise intended to possibly be protected.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3927-1 advisory.

    - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7104-1 advisory.

    It was discovered that curl could overwrite the HSTS expiry of the parent domain with the subdomain's HSTS     entry. This could lead to curl switching back to insecure HTTP earlier than otherwise intended, resulting     in information exposure.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3926-1 advisory.

    - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3925-1 advisory.

    - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3927-2 advisory.

    - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
210890	Photon OS 3.0: Curl PHSA-2024-3.0-0802	Nessus	PhotonOS Local Security Checks	11/13/2024	12/13/2024	medium
210585	Curl 7.74.0 < 8.10.1 Input Misinterpretation (CVE-2024-9681)	Nessus	Misc.	11/8/2024	12/13/2024	medium
210473	SUSE SLES12 Security Update : curl (SUSE-SU-2024:3927-1)	Nessus	SuSE Local Security Checks	11/7/2024	12/13/2024	medium
210719	Photon OS 5.0: Curl PHSA-2024-5.0-0392	Nessus	PhotonOS Local Security Checks	11/9/2024	12/13/2024	medium
210755	Photon OS 4.0: Curl PHSA-2024-4.0-0709	Nessus	PhotonOS Local Security Checks	11/12/2024	12/13/2024	medium
211514	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : curl vulnerability (USN-7104-1)	Nessus	Ubuntu Local Security Checks	11/18/2024	12/13/2024	medium
210469	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2024:3926-1)	Nessus	SuSE Local Security Checks	11/7/2024	12/13/2024	medium
210472	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2024:3925-1)	Nessus	SuSE Local Security Checks	11/7/2024	12/13/2024	medium
213267	SUSE SLES12 Security Update : curl (SUSE-SU-2024:3927-2)	Nessus	SuSE Local Security Checks	12/20/2024	12/20/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium