CVE-2024-2398: curl from 7.44.0 (inclusive), before 8.7.0 (exclusive), 8.6.0 through 8.6.0, 8.5.0 through 8.5.0, 8.4.0 through 8.4.0…

Affected technology

curl · from 7.44.0 (inclusive), before 8.7.0 (exclusive)
haxx

macos · before 12.7.6 (exclusive)
apple

macos · from 13.0 (inclusive), before 13.6.8 (exclusive)
apple

macos · from 14.0 (inclusive), before 14.6 (exclusive)
apple

fedora · 39
fedoraproject

fedora · 40
fedoraproject

active iq unified manager · Version not applicable in the source CPE
netapp

ontap select deploy administration utility · Version not applicable in the source CPE
netapp

brocade fabric operating system · Version not applicable in the source CPE
netapp

bootstrap os · Version not applicable in the source CPE
netapp

h300s firmware · Version not applicable in the source CPE
netapp

h410s firmware · Version not applicable in the source CPE
netapp

h500s firmware · Version not applicable in the source CPE
netapp

h610c firmware · Version not applicable in the source CPE
netapp

h610s firmware · Version not applicable in the source CPE
netapp

h615c firmware · Version not applicable in the source CPE
netapp

h700s firmware · Version not applicable in the source CPE
netapp

curl · 8.6.0 through 8.6.0, 8.5.0 through 8.5.0, 8.4.0 through 8.4.0, 8.3.0 through 8.3.0, 8.2.1 through 8.2.1, 8.2.0 through 8.2.0, 8.1.2 through 8.1.2, 8.1.1 through 8.1.1, 8.1.0 through 8.1.0, 8.0.1 through 8.0.1, 8.0.0 through 8.0.0, 7.88.1 through 7.88.1, 7.88.0 through 7.88.0, 7.87.0 through 7.87.0, 7.86.0 through 7.86.0, 7.85.0 through 7.85.0, 7.84.0 through 7.84.0, 7.83.1 through 7.83.1, 7.83.0 through 7.83.0, 7.82.0 through 7.82.0, 7.81.0 through 7.81.0, 7.80.0 through 7.80.0, 7.79.1 through 7.79.1, 7.79.0 through 7.79.0, 7.78.0 through 7.78.0, 7.77.0 through 7.77.0, 7.76.1 through 7.76.1, 7.76.0 through 7.76.0, 7.75.0 through 7.75.0, 7.74.0 through 7.74.0, 7.73.0 through 7.73.0, 7.72.0 through 7.72.0, 7.71.1 through 7.71.1, 7.71.0 through 7.71.0, 7.70.0 through 7.70.0, 7.69.1 through 7.69.1, 7.69.0 through 7.69.0, 7.68.0 through 7.68.0, 7.67.0 through 7.67.0, 7.66.0 through 7.66.0, 7.65.3 through 7.65.3, 7.65.2 through 7.65.2, 7.65.1 through 7.65.1, 7.65.0 through 7.65.0, 7.64.1 through 7.64.1, 7.64.0 through 7.64.0, 7.63.0 through 7.63.0, 7.62.0 through 7.62.0, 7.61.1 through 7.61.1, 7.61.0 through 7.61.0, 7.60.0 through 7.60.0, 7.59.0 through 7.59.0, 7.58.0 through 7.58.0, 7.57.0 through 7.57.0, 7.56.1 through 7.56.1, 7.56.0 through 7.56.0, 7.55.1 through 7.55.1, 7.55.0 through 7.55.0, 7.54.1 through 7.54.1, 7.54.0 through 7.54.0, 7.53.1 through 7.53.1, 7.53.0 through 7.53.0, 7.52.1 through 7.52.1, 7.52.0 through 7.52.0, 7.51.0 through 7.51.0, 7.50.3 through 7.50.3, 7.50.2 through 7.50.2, 7.50.1 through 7.50.1, 7.50.0 through 7.50.0, 7.49.1 through 7.49.1, 7.49.0 through 7.49.0, 7.48.0 through 7.48.0, 7.47.1 through 7.47.1, 7.47.0 through 7.47.0, 7.46.0 through 7.46.0, 7.45.0 through 7.45.0, 7.44.0 through 7.44.0
curl

curl · 7.44.0 through 8.6.0
curl

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SINEMA Remote Connect Client · 0 to before V3.2 SP2
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SINEC NMS · 0 to before V3.0 SP1
Siemens

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.6/10) rates confidentiality impact as high; integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.