CVE-2023-27535
MediumAdvisory
Published 20 Mar 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.016
- 75th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 666
- of 17,787 indexed, latest versions
- Container images
- 597
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 666 of 17,787 indexed charts deploy, on 597 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+48 more | 7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18+1 more | 294 |
| curlapk | 7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more | 7.88.1-r1, 8.0.1-r0 | 163 |
| curlrpm | 7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+15 more | 0:7.61.1-30.el8_8.2, 0:7.76.1-23.el9_2.1 | 140 |
- OSV records
- ALPINE-CVE-2023-27535RHSA-2023:2650RHSA-2023:3106UBUNTU-CVE-2023-27535RLSA-2023:3106
- Also known as
- USN-5964-1, USN-5964-2
Charts affected
666 by stars
Container images carrying it
597 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 8ba040e79ca0 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 21275bc02f75 | curl | 7.88.1-r1 | 1 |
| ghcr.io/ | aa45adaf59a7 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | e159ba41aede | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 1041d4449e49 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | fc39fcdd3968 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 857b137fc7b3 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 44790b71aa22 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 6dce3158b851 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 25d229ae5bde | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 558972f9374c | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 57072c72a7cd | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 200aea1a2b42 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | f4a5bfc06a74 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | fbf0738cfc7e | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | e2e812a4cf8e | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | b612c18479e0 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | e2d927639f6e | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 32c6d2f5eab9 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 7ac2adb6ca49 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 1a958edafdb1 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | c6bb121ced90 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 6ba7e1608286 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 5253fbf8d04c | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 7dd5ac80c8f1 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | adebc40ddf98 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | 372dcd370945 | curl | 0:7.76.1-23.el9_2.1 | 1 |
| ghcr.io/ | bcd5b8d4c45c | curl | 7.58.0-2ubuntu3.24 | 1 |
| ghcr.io/ | 7e1d7a11a11a | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | a2162df94729 | curl | 7.88.1-r1 | 1 |
| ghcr.io/ | 923a3f704b21 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 3fbe4c29d14c | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | ec6d67fbedfa | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 8caf5289fe73 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 6047599cd78e | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 94c9a3e799c2 | curl | 7.88.1-r1 | 1 |
| ghcr.io/ | c9bd82dc5fda | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | fdb5501cdfb9 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 827aa2f2389d | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 3a4715b46aa2 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 54ebc1f90963 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | cbd5d4cc1245 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | e5571acd10ce | curl | 7.81.0-1ubuntu1.10 | 1 |
| ghcr.io/ | ef3670f7e0a8 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | ef756c7d784b | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | c863aa9875fa | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 61deadd1ec78 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 4273dfaf0295 | curl | 7.81.0-1ubuntu1.10 | 1 |
| ghcr.io/ | ad943e9309e4 | curl | 7.68.0-1ubuntu2.18 | 1 |