Detections
Analytics
Rocky Linux 9.6 [CIQ] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ciqsa-2026_1401)
critical Nessus Plugin ID 353701
Language:
Synopsis
The Rocky Linux host is missing one or more security updates.Description
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1401 advisory.This advisory aggregates security fixes for the curl SRPM in CIQ LTS 9.6. It addresses 148 CVEs:
CVE-2023-32001, CVE-2022-27775, CVE-2018-1000005, CVE-2022-27774, CVE-2022-32221, and 143 more.
Tenable has extracted the preceding description block directly from the CIQ security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages based on the guidance in CIQ advisory ciqsa-2026_1401.See Also
https://github.com/ctrliq/advisories
http://www.nessus.org/u?009302b8
http://www.nessus.org/u?017d48a7
http://www.nessus.org/u?026db809
http://www.nessus.org/u?02b239b1
http://www.nessus.org/u?02d740fe
http://www.nessus.org/u?06755d55
http://www.nessus.org/u?09235a9b
http://www.nessus.org/u?0b900e14
http://www.nessus.org/u?0e043f9d
http://www.nessus.org/u?0f78a928
http://www.nessus.org/u?13ce4b12
http://www.nessus.org/u?14c9ac38
http://www.nessus.org/u?14f520c4
http://www.nessus.org/u?15c8d0fd
http://www.nessus.org/u?1650e0e4
http://www.nessus.org/u?19effdcc
http://www.nessus.org/u?1f8161ab
http://www.nessus.org/u?20fadd32
http://www.nessus.org/u?24ea9f60
http://www.nessus.org/u?25eec113
http://www.nessus.org/u?277cedfa
http://www.nessus.org/u?2b0e7b37
http://www.nessus.org/u?2be31abb
http://www.nessus.org/u?314adc31
http://www.nessus.org/u?32ad91f3
http://www.nessus.org/u?33ce97e2
http://www.nessus.org/u?3487283f
http://www.nessus.org/u?34c6e33f
http://www.nessus.org/u?34d45b15
http://www.nessus.org/u?35e222c5
http://www.nessus.org/u?377c9e6d
http://www.nessus.org/u?3d24b8a1
http://www.nessus.org/u?3f363e7e
http://www.nessus.org/u?3f4dcae5
http://www.nessus.org/u?3f6ead56
http://www.nessus.org/u?40dfe940
http://www.nessus.org/u?41d7ab03
http://www.nessus.org/u?43009add
http://www.nessus.org/u?433404d9
http://www.nessus.org/u?449cd879
http://www.nessus.org/u?477ed5ae
http://www.nessus.org/u?48844f28
http://www.nessus.org/u?4eaecc36
http://www.nessus.org/u?51025c0b
http://www.nessus.org/u?53aa7278
http://www.nessus.org/u?53c0b366
http://www.nessus.org/u?540ccebf
http://www.nessus.org/u?563424d1
http://www.nessus.org/u?59da32eb
http://www.nessus.org/u?5a3b9568
http://www.nessus.org/u?5b3d8cdf
http://www.nessus.org/u?5b946e2a
http://www.nessus.org/u?5e77fe41
http://www.nessus.org/u?5f441b11
http://www.nessus.org/u?5fbf0639
http://www.nessus.org/u?639f571b
http://www.nessus.org/u?65f1ca22
http://www.nessus.org/u?68368f67
http://www.nessus.org/u?68e04471
http://www.nessus.org/u?6d646a43
http://www.nessus.org/u?6e5b7a2f
http://www.nessus.org/u?6ef2acf5
http://www.nessus.org/u?6f4b3cf2
http://www.nessus.org/u?729f8bfa
http://www.nessus.org/u?72f73bd5
http://www.nessus.org/u?74e4172a
http://www.nessus.org/u?7777a86b
http://www.nessus.org/u?78d5aba7
http://www.nessus.org/u?798aa7e8
http://www.nessus.org/u?7da64e4c
http://www.nessus.org/u?80b46e40
http://www.nessus.org/u?8343232a
http://www.nessus.org/u?8425f1e7
http://www.nessus.org/u?84af819d
http://www.nessus.org/u?8ec41f21
http://www.nessus.org/u?8f554f5f
http://www.nessus.org/u?8fc108b2
http://www.nessus.org/u?90d14d9d
http://www.nessus.org/u?91484365
http://www.nessus.org/u?94760122
http://www.nessus.org/u?94f3ddab
http://www.nessus.org/u?958eae6d
http://www.nessus.org/u?963f8094
http://www.nessus.org/u?98243499
http://www.nessus.org/u?9c8a411f
http://www.nessus.org/u?9e402e53
http://www.nessus.org/u?9f54c625
http://www.nessus.org/u?a0146f37
http://www.nessus.org/u?a0e35f66
http://www.nessus.org/u?a6d7f954
http://www.nessus.org/u?a80f586f
http://www.nessus.org/u?a8425971
http://www.nessus.org/u?a887c137
http://www.nessus.org/u?aea2ed13
http://www.nessus.org/u?aec14dc9
http://www.nessus.org/u?af37e815
http://www.nessus.org/u?b1451243
http://www.nessus.org/u?b24d4522
http://www.nessus.org/u?b36b5259
http://www.nessus.org/u?b36ee460
http://www.nessus.org/u?b50f1cb2
http://www.nessus.org/u?b5570db0
http://www.nessus.org/u?b796525e
http://www.nessus.org/u?b99150d9
http://www.nessus.org/u?b99ab886
http://www.nessus.org/u?bd1af5ae
http://www.nessus.org/u?bd9a5a0f
http://www.nessus.org/u?be1a774a
http://www.nessus.org/u?bfeae736
http://www.nessus.org/u?c14848f4
http://www.nessus.org/u?c1856222
http://www.nessus.org/u?c5642492
http://www.nessus.org/u?c7c34b76
http://www.nessus.org/u?c92b1fa0
http://www.nessus.org/u?c9e7bc87
http://www.nessus.org/u?cb36a589
http://www.nessus.org/u?cc12f75e
http://www.nessus.org/u?cc57ffbd
http://www.nessus.org/u?ccc74778
http://www.nessus.org/u?ccc810cd
http://www.nessus.org/u?cddf3a8e
http://www.nessus.org/u?cf449b90
http://www.nessus.org/u?cfac2449
http://www.nessus.org/u?d0a5723d
http://www.nessus.org/u?d75b88a7
http://www.nessus.org/u?d7f2c384
http://www.nessus.org/u?d8259ab8
http://www.nessus.org/u?dca9fb53
http://www.nessus.org/u?de1e62a5
http://www.nessus.org/u?de8484f2
http://www.nessus.org/u?dec511ee
http://www.nessus.org/u?e19787f4
http://www.nessus.org/u?e56aa124
http://www.nessus.org/u?e64f1554
http://www.nessus.org/u?e696bc84
http://www.nessus.org/u?e7ee2d53
http://www.nessus.org/u?ed30d3cf
http://www.nessus.org/u?ee00c510
http://www.nessus.org/u?f2cb7c22
http://www.nessus.org/u?f364eaea
http://www.nessus.org/u?f39f1d33
http://www.nessus.org/u?f41d6a22
http://www.nessus.org/u?f55916aa
http://www.nessus.org/u?f76c9cce
http://www.nessus.org/u?fb352988
http://www.nessus.org/u?fc61f5c3
http://www.nessus.org/u?fe4d5c4b
Plugin Details
Severity: Critical
ID: 353701
File Name: ciq_rocky_linux_9_6_ciqsa-2026_1401.nasl
Version: 1.4
Type: Local
Published: 10/1/2026
Updated: 10/13/2026
Supported Sensors: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
Percentile: 99.77
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2018-14618
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS Score Source: CVE-2023-38545
Vulnerability Information
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/2/2026
Vulnerability Publication Date: 5/18/2023
Reference Information
CVE: CVE-2013-0249, CVE-2013-1944, CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-3613, CVE-2014-3620, CVE-2014-3707, CVE-2014-8150, CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236, CVE-2015-3237, CVE-2016-0755, CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616, CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620, CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624, CVE-2016-8625, CVE-2016-9586, CVE-2017-1000099, CVE-2017-1000100, CVE-2017-1000101, CVE-2017-1000254, CVE-2017-1000257, CVE-2017-2629, CVE-2017-7407, CVE-2017-7468, CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, CVE-2018-0500, CVE-2018-1000005, CVE-2018-1000007, CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122, CVE-2018-1000300, CVE-2018-1000301, CVE-2018-14618, CVE-2018-16839, CVE-2018-16840, CVE-2018-16842, CVE-2018-16890, CVE-2018-20483, CVE-2019-3822, CVE-2019-3823, CVE-2019-5435, CVE-2019-5436, CVE-2019-5481, CVE-2019-5482, CVE-2020-8169, CVE-2020-8177, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286, CVE-2021-22876, CVE-2021-22890, CVE-2021-22898, CVE-2021-22901, CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22945, CVE-2021-22946, CVE-2021-22947, CVE-2022-22576, CVE-2022-27774, CVE-2022-27775, CVE-2022-27776, CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208, CVE-2022-32221, CVE-2022-35252, CVE-2022-35260, CVE-2022-42915, CVE-2022-42916, CVE-2022-43551, CVE-2022-43552, CVE-2023-23914, CVE-2023-23915, CVE-2023-23916, CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538, CVE-2023-28321, CVE-2023-28322, CVE-2023-32001, CVE-2023-38039, CVE-2023-38545, CVE-2023-38546, CVE-2023-46218, CVE-2023-46219, CVE-2024-0853, CVE-2024-11053, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-6197, CVE-2024-6874, CVE-2024-8096, CVE-2024-9681, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-10966, CVE-2025-14017, CVE-2025-14524, CVE-2025-15079, CVE-2025-15224, CVE-2025-4947, CVE-2025-5025, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168