CVE-2024-2004
curl: Multiple issues in curl
CVE-2024-2004 is fixed in 15 products on 2 platforms, first by curl 8.5.0-2ubuntu10.1, released March 27, 2024. It is not reported as exploited. Patch Radar priority: Routine.
RoutineFixed on 2 platforms
CVSS
3.5
LOW
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0168
77th percentile
This is a vulnerability in open source code and Apple Software is among the affected projects. The
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| macOS | |||
| Monterey | 12.7.6 | Monterey 12.7.6 | Jul 29, 2024 |
| Sonoma | 14.6 | Sonoma 14.6 | Jul 29, 2024 |
| Ventura | 13.6.8 | Ventura 13.6.8 | Jul 29, 2024 |
| Linux | |||
| curl · Debian 12.15 (bookworm) | 7.88.1-10+deb12u6 | DEBIAN-CVE-2024-2004 | Mar 27, 2024 |
| curl · Debian 13.5 (trixie) | 8.7.1-1 | DEBIAN-CVE-2024-2004 | Mar 27, 2024 |
| curl · Debian 14 | 8.7.1-1 | DEBIAN-CVE-2024-2004 | Mar 27, 2024 |
| curl · Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | curl 8.5.0-2ubuntu10.1 | Mar 27, 2024 |
| curl · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| curl-debuginfo · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| curl-debugsource · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| curl-minimal · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| curl-minimal-debuginfo · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl-debuginfo · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl-devel · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl-minimal · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl-minimal-debuginfo · amzn 2023 | 8.5.0-1.amzn2023.0.4 | ALAS2023-2024-596 | Apr 25, 2024 |
| libcurl3t64-gnutls · Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | libcurl3t64-gnutls 8.5.0-2ubuntu10.1 | Mar 27, 2024 |
| libcurl4t64 · Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | libcurl4t64 8.5.0-2ubuntu10.1 | Mar 27, 2024 |