The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0030 advisory.

    This advisory aggregates security fixes for the curl SRPM in CIQ LTS 8.6. It addresses 89 CVEs:
    CVE-2019-5481, CVE-2015-3148, CVE-2021-22922, CVE-2016-5420, CVE-2021-22924, and 84 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0406 advisory.

    This advisory aggregates security fixes for the curl SRPM in CIQ LTS 9.2. It addresses 105 CVEs:
    CVE-2022-27775, CVE-2022-32221, CVE-2019-5481, CVE-2015-3148, CVE-2018-14618, and 100 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2016 advisory.

    [7.29.0-42]
    - fix use of uninitialized variable detected by Covscan

    [7.29.0-41]
    - make FTPS work with --proxytunnel (#1420327)

    [7.29.0-40]
    - make FTPS work with --proxytunnel (#1420327)

    [7.29.0-39]
    - work around race condition in PK11_FindSlotByName() in NSS (#1404815)

    [7.29.0-38]
    - make FTPS work with --proxytunnel (#1420327)

    [7.29.0-37]
    - fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
    - handle cookies with numerical IPv6 address (#1341503)
    - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
    - curl -E: allow to escape ':' in cert nickname (#1376062)
    - run automake in %prep to avoid patching Makefile.in files from now on

    [7.29.0-36]
    - reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4)     curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a     string of length 0xffffffff, which triggers a heap-based buffer overflow. (CVE-2016-7167)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1909:01 advisory.

    curl is a command line tool for transferring data with URL syntax, supporting     FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,     SMTP, POP3 and RTSP.  curl supports SSL certificates, HTTP POST, HTTP PUT, FTP     uploading, HTTP form based upload, proxies, cookies, user password     authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer     resume, proxy tunneling and a busload of other useful tricks.
    CVE-2016-7167     Multiple integer overflows in the (1) curl_escape, (2)     curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape     functions in libcurl before 7.50.3 allow attackers to have unspecified     impact via a string of length 0xffffffff, which triggers a heap-based     buffer overflow.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

After testing original CVE-2016-5420 patch, it was discovered that libcurl built on top of NSS (Network Security Services) still incorrectly re-uses client certificates if a certificate from file is used for one TLS connection but no certificate is set for a subsequent TLS connection.

This update for curl fixes the following security issues :

  - CVE-2016-8624: invalid URL parsing with '#'     (bsc#1005646)

  - CVE-2016-8623: Use-after-free via shared cookies     (bsc#1005645)

  - CVE-2016-8622: URL unescape heap overflow via integer     truncation (bsc#1005643)

  - CVE-2016-8621: curl_getdate read out of bounds     (bsc#1005642)

  - CVE-2016-8620: glob parser write/read out of bounds     (bsc#1005640)

  - CVE-2016-8619: double-free in krb5 code (bsc#1005638)

  - CVE-2016-8618: double-free in curl_maprintf     (bsc#1005637)

  - CVE-2016-8617: OOB write via unchecked multiplication     (bsc#1005635)

  - CVE-2016-8616: case insensitive password comparison     (bsc#1005634)

  - CVE-2016-8615: cookie injection for other servers     (bsc#1005633)

  - CVE-2016-7167: escape and unescape integer overflows     (bsc#998760)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for curl fixes the following security issues :

  - CVE-2016-8624: invalid URL parsing with '#'     (bsc#1005646)

  - CVE-2016-8623: Use-after-free via shared cookies     (bsc#1005645)

  - CVE-2016-8621: curl_getdate read out of bounds     (bsc#1005642)

  - CVE-2016-8619: double-free in krb5 code (bsc#1005638)

  - CVE-2016-8618: double-free in curl_maprintf     (bsc#1005637)

  - CVE-2016-8617: OOB write via unchecked multiplication     (bsc#1005635)

  - CVE-2016-8616: case insensitive password comparison     (bsc#1005634)

  - CVE-2016-8615: cookie injection for other servers     (bsc#1005633)

  - CVE-2016-7167: escape and unescape integer overflows     (bsc#998760)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
359305	Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0030)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	critical
356987	Rocky Linux 9.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0406)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/13/2026	critical
102295	Oracle Linux 7 : curl (ELSA-2017-2016)	Nessus	Oracle Linux Local Security Checks	8/9/2017	10/23/2024	critical
219898	Linux Distros Unpatched Vulnerability : CVE-2016-7167	Nessus	Misc.	3/4/2025	7/24/2026	critical
289808	MiracleLinux 7 : curl-7.29.0-42.el7 (AXSA:2017-1909:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
93535	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : curl (SSA:2016-259-01)	Nessus	Slackware Local Security Checks	9/16/2016	1/23/2026	critical
93743	Amazon Linux AMI : curl (ALAS-2016-742)	Nessus	Amazon Linux Local Security Checks	9/28/2016	1/23/2026	critical
94506	SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2699-1)	Nessus	SuSE Local Security Checks	11/3/2016	1/20/2026	critical
94572	SUSE SLES11 Security Update : curl (SUSE-SU-2016:2714-1)	Nessus	SuSE Local Security Checks	11/4/2016	1/20/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical