CVE-2023-27535
MediumAdvisory
Published 20 Mar 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.016
- 75th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 665
- of 17,787 indexed, latest versions
- Container images
- 596
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 665 of 17,787 indexed charts deploy, on 596 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+48 more | 7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18+1 more | 294 |
| curlapk | 7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more | 7.88.1-r1, 8.0.1-r0 | 162 |
| curlrpm | 7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+15 more | 0:7.61.1-30.el8_8.2, 0:7.76.1-23.el9_2.1 | 140 |
- OSV records
- ALPINE-CVE-2023-27535RHSA-2023:2650RHSA-2023:3106UBUNTU-CVE-2023-27535RLSA-2023:3106
- Also known as
- USN-5964-1, USN-5964-2
Charts affected
665 by stars
Container images carrying it
596 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| timothyclarke/ | 22c41e5ca7e2 | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| tomsquest/ | 4759cc353a1d | curl | 8.0.1-r0 | 1 |
| tpdock/ | 3da600c95a49 | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| trafex/ | 7282edfca2bf | curl | 8.0.1-r0 | 1 |
| trafex/ | ee0b7c6cce07 | curl | 8.0.1-r0 | 1 |
| trinodb/ | ee80ab5eeab2 | curl | 7.81.0-1ubuntu1.10 | 1 |
| vaultwarden/ | 7cd450642c54 | curl | 7.88.1-r1 | 1 |
| vectorim/ | 84bb5af00b5d | curl | 8.0.1-r0 | 1 |
| vinanrra/ | f9534490bd2b | curl | 7.58.0-2ubuntu3.24 | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| vitorbari/ | fd3ccb820ada | curl | 8.0.1-r0 | 1 |
| voltha/ | 59ab2a00f712 | curl | 7.35.0-1ubuntu2.20+esm15 | 1 |
| voltha/ | e038acb950d3 | curl | 7.58.0-2ubuntu3.24 | 1 |
| wavefronthq/ | d1064d28f6eb | curl | 7.58.0-2ubuntu3.24 | 1 |
| weetmuts/ | a79967400c61 | curl | 8.0.1-r0 | 1 |
| wener/ | cc9fd4da44c0 | curl | 8.0.1-r0 | 1 |
| wener/ | 5c92cc9e8597 | curl | 8.0.1-r0 | 1 |
| wistefan/ | e0887302b2d8 | curl | 7.81.0-1ubuntu1.10 | 1 |
| xeotek/ | 4c6b04d9ce55 | curl | 7.68.0-1ubuntu2.18 | 1 |
| xvilo/ | a138e57d3204 | curl | 7.88.1-r1 | 1 |
| zabbix/ | 2127168cab03 | curl | 7.68.0-1ubuntu2.18 | 1 |
| zabbix/ | e5b594057c9c | curl | 7.81.0-1ubuntu1.10 | 1 |
| zabbix/ | 6c946b1f45cd | curl | 7.68.0-1ubuntu2.18 | 1 |
| zabbix/ | d59ffa07f615 | curl | 7.81.0-1ubuntu1.10 | 1 |
| zabbix/ | 01de79c31391 | curl | 7.68.0-1ubuntu2.18 | 1 |
| zabbix/ | 99e9a090b516 | curl | 7.81.0-1ubuntu1.10 | 1 |
| gcr.io/ | 809338a69bd5 | curl | 7.58.0-2ubuntu3.24 | 1 |
| gcr.io/ | 10f4dbc8eeeb | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| gcr.io/ | cb5c1bddd1b5 | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| gcr.io/ | 5ea7b7f3632a | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| gcr.io/ | c552478f8f11 | curl | 7.68.0-1ubuntu2.18 | 1 |
| gcr.io/ | 8f9ff98fdbef | curl | 7.47.0-1ubuntu2.19+esm8 | 1 |
| gcr.io/ | 9538fabe49fd | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | 13a01be102b0 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | d4022cd32df5 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 6fde1edc0983 | curl | 7.68.0-1ubuntu2.18 | 1 |
| ghcr.io/ | ee6a21e66ff0 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 3b3fbb57cae8 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | eeb625bd660c | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 24bbca4a52a8 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | da6b05a1a601 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 1ea5412bed26 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 198db44fabb5 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 8f1bbd5cda85 | curl | 8.0.1-r0 | 1 |
| ghcr.io/ | 61a9bb81b85c | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 0cf25ed621e2 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 0635f17c9d2c | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | e34964e336c1 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | curl | 0:7.61.1-30.el8_8.2 | 1 |
| ghcr.io/ | 8ba040e79ca0 | curl | 0:7.61.1-30.el8_8.2 | 1 |