# CVE-2024-2004: curl: Multiple issues in curl

CVE-2024-2004 is fixed in 15 products on 2 platforms, first by curl 8.5.0-2ubuntu10.1, released March 27, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-2004
- Priority: Routine
- CVSS: 3.5 (LOW)
- EPSS: 0.0168
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 27, 2024
- Vendor advisory: https://support.apple.com/en-us/120911

## Description

This is a vulnerability in open source code and Apple Software is among the affected projects. The

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| macOS | Monterey | 12.7.6 | [Monterey 12.7.6](https://patchblox.com/security/data/fix/macos/monterey-12.7.6.md) | Jul 29, 2024 |
| macOS | Sonoma | 14.6 | [Sonoma 14.6](https://patchblox.com/security/data/fix/macos/sonoma-14.6.md) | Jul 29, 2024 |
| macOS | Ventura | 13.6.8 | [Ventura 13.6.8](https://patchblox.com/security/data/fix/macos/ventura-13.6.8.md) | Jul 29, 2024 |
| Linux | curl Debian 12.15 (bookworm) | 7.88.1-10+deb12u6 | [DEBIAN-CVE-2024-2004](https://patchblox.com/security/data/fix/linux/debian-cve-2024-2004.md) | Mar 27, 2024 |
| Linux | curl Debian 13.5 (trixie) | 8.7.1-1 | [DEBIAN-CVE-2024-2004](https://patchblox.com/security/data/fix/linux/debian-cve-2024-2004.md) | Mar 27, 2024 |
| Linux | curl Debian 14 | 8.7.1-1 | [DEBIAN-CVE-2024-2004](https://patchblox.com/security/data/fix/linux/debian-cve-2024-2004.md) | Mar 27, 2024 |
| Linux | curl Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | [curl 8.5.0-2ubuntu10.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-curl-8.5.0-2ubuntu10.1.md) | Mar 27, 2024 |
| Linux | curl amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | curl-debuginfo amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | curl-debugsource amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | curl-minimal amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | curl-minimal-debuginfo amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl-debuginfo amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl-devel amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl-minimal amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl-minimal-debuginfo amzn 2023 | 8.5.0-1.amzn2023.0.4 | [ALAS2023-2024-596](https://patchblox.com/security/data/fix/linux/alas2023-2024-596.md) | Apr 25, 2024 |
| Linux | libcurl3t64-gnutls Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | [libcurl3t64-gnutls 8.5.0-2ubuntu10.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libcurl3t64-gnutls-8.5.0-2ubuntu10.1.md) | Mar 27, 2024 |
| Linux | libcurl4t64 Ubuntu 24.04.5 LTS (noble) | 8.5.0-2ubuntu10.1 | [libcurl4t64 8.5.0-2ubuntu10.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libcurl4t64-8.5.0-2ubuntu10.1.md) | Mar 27, 2024 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo