CVE-2024-7264: libcurl from 7.32.0 (inclusive), before 8.9.1 (exclusive); +21 more affected products

Affected technology

libcurl · from 7.32.0 (inclusive), before 8.9.1 (exclusive)
haxx

curl · 8.9.0 through 8.9.0, 8.8.0 through 8.8.0, 8.7.1 through 8.7.1, 8.7.0 through 8.7.0, 8.6.0 through 8.6.0, 8.5.0 through 8.5.0, 8.4.0 through 8.4.0, 8.3.0 through 8.3.0, 8.2.1 through 8.2.1, 8.2.0 through 8.2.0, 8.1.2 through 8.1.2, 8.1.1 through 8.1.1, 8.1.0 through 8.1.0, 8.0.1 through 8.0.1, 8.0.0 through 8.0.0, 7.88.1 through 7.88.1, 7.88.0 through 7.88.0, 7.87.0 through 7.87.0, 7.86.0 through 7.86.0, 7.85.0 through 7.85.0, 7.84.0 through 7.84.0, 7.83.1 through 7.83.1, 7.83.0 through 7.83.0, 7.82.0 through 7.82.0, 7.81.0 through 7.81.0, 7.80.0 through 7.80.0, 7.79.1 through 7.79.1, 7.79.0 through 7.79.0, 7.78.0 through 7.78.0, 7.77.0 through 7.77.0, 7.76.1 through 7.76.1, 7.76.0 through 7.76.0, 7.75.0 through 7.75.0, 7.74.0 through 7.74.0, 7.73.0 through 7.73.0, 7.72.0 through 7.72.0, 7.71.1 through 7.71.1, 7.71.0 through 7.71.0, 7.70.0 through 7.70.0, 7.69.1 through 7.69.1, 7.69.0 through 7.69.0, 7.68.0 through 7.68.0, 7.67.0 through 7.67.0, 7.66.0 through 7.66.0, 7.65.3 through 7.65.3, 7.65.2 through 7.65.2, 7.65.1 through 7.65.1, 7.65.0 through 7.65.0, 7.64.1 through 7.64.1, 7.64.0 through 7.64.0, 7.63.0 through 7.63.0, 7.62.0 through 7.62.0, 7.61.1 through 7.61.1, 7.61.0 through 7.61.0, 7.60.0 through 7.60.0, 7.59.0 through 7.59.0, 7.58.0 through 7.58.0, 7.57.0 through 7.57.0, 7.56.1 through 7.56.1, 7.56.0 through 7.56.0, 7.55.1 through 7.55.1, 7.55.0 through 7.55.0, 7.54.1 through 7.54.1, 7.54.0 through 7.54.0, 7.53.1 through 7.53.1, 7.53.0 through 7.53.0, 7.52.1 through 7.52.1, 7.52.0 through 7.52.0, 7.51.0 through 7.51.0, 7.50.3 through 7.50.3, 7.50.2 through 7.50.2, 7.50.1 through 7.50.1, 7.50.0 through 7.50.0, 7.49.1 through 7.49.1, 7.49.0 through 7.49.0, 7.48.0 through 7.48.0, 7.47.1 through 7.47.1, 7.47.0 through 7.47.0, 7.46.0 through 7.46.0, 7.45.0 through 7.45.0, 7.44.0 through 7.44.0, 7.43.0 through 7.43.0, 7.42.1 through 7.42.1, 7.42.0 through 7.42.0, 7.41.0 through 7.41.0, 7.40.0 through 7.40.0, 7.39.0 through 7.39.0, 7.38.0 through 7.38.0, 7.37.1 through 7.37.1, 7.37.0 through 7.37.0, 7.36.0 through 7.36.0, 7.35.0 through 7.35.0, 7.34.0 through 7.34.0, 7.33.0 through 7.33.0, 7.32.0 through 7.32.0
curl

RUGGEDCOM RST2428P · 0 to before V3.3
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.3
Siemens

SCALANCE XCH328 · 0 to before V3.3
Siemens

SCALANCE XCM324 · 0 to before V3.3
Siemens

SCALANCE XCM328 · 0 to before V3.3
Siemens

SCALANCE XCM332 · 0 to before V3.3
Siemens

SCALANCE XRH334 (24 V DC, 8xFO, CC) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24 V DC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 12xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230 V AC, 8xFO) · 0 to before V3.3
Siemens

SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) · 0 to before V3.3
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.