Windows 10: CVE-2023-38545 cURL vulnerability

Discus and support CVE-2023-38545 cURL vulnerability in Windows 10 Software and Apps to solve the problem; Hello!I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on... Discussion in 'Windows 10 Software and Apps' started by Matthew Rosier, Nov 8, 2023.

  1. MATTHEW ROSIER
    Matthew Rosier Win User

    CVE-2023-38545 cURL vulnerability


    Hello!I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on the machines. I see this means we have to wait for Microsoft to release an update. Can someone please provide any idea as to when that might be so we can provide a timeline to vulnerability management stakeholders for compliance?

    :)
     
    Matthew Rosier, Nov 8, 2023
    #1
  2. S KALE
    S Kale Win User

    Curl Arbitrary File Write 7.x >= 7.84.0 / 8.x <= 8.1.2 (CVE-2023-32001) with windows 10 and windows 11

    Hi,

    Nessus found a vulnerability with curl. It looks like Windows 10 and Windows 11 use version 8.0.1 which is vulnerable. (Curl Arbitrary File Write 7.x >= 7.84.0 / 8.x <= 8.1.2 (CVE-2023-32001))

    Does Microsoft plan to release a patch?

    curl - fopen race condition - CVE-2023-32001
     
    S Kale, Nov 8, 2023
    #2
  3. ANONYMOUS_0987
    Anonymous_0987 Win User
    Required KB Package exclusive to CVE-2023-23415 Vulnerability

    Hi,

    Can someone help with the update Package exclusive to CVE-2023-23415 Vulnerability.

    I have a Win10 1607 and required a small package for the CVE-2023-23415 Vulnerability. Right now, the packages available in the catalog are around 1536.2 MB. which includes multiple other fixes.

    I need a smaller package only with this CVE-2023-23415 Vulnerability fix.
     
    Anonymous_0987, Nov 8, 2023
    #3
  4. DAVID BUSHUE
    David Bushue Win User

    CVE-2023-38545 cURL vulnerability

    Update on Patch for Curl

    Can I get an update on the fix for CVE-2023-38545
     
    David Bushue, Nov 8, 2023
    #4
Thema:

CVE-2023-38545 cURL vulnerability

Loading...

  1. CVE-2023-38545 cURL vulnerability - Similar Threads - CVE 2023 38545

  2. Curl and Libcurl - Vulnerability

    in Windows 10 Gaming
    Curl and Libcurl - Vulnerability: Good afternoon! We have reported 3 vulnerabilities in our environment related to the Curl and libcurl versions. Most machines have version 8.10.1.0 in the files located in the paths %windir%\System32\ and %windir%\SysWOW64\. To resolve the vulnerability, it is necessary to...

  3. Curl and Libcurl - Vulnerability

    in Windows 10 Software and Apps
    Curl and Libcurl - Vulnerability: Good afternoon! We have reported 3 vulnerabilities in our environment related to the Curl and libcurl versions. Most machines have version 8.10.1.0 in the files located in the paths %windir%\System32\ and %windir%\SysWOW64\. To resolve the vulnerability, it is necessary to...

  4. CVE-2023-49210 Critical Vulnerability OpenSSL

    in Windows 10 Gaming
    CVE-2023-49210 Critical Vulnerability OpenSSL: CVE-2023-49210 Critical Vulnerability OpenSSL-Hi Team about this vulnerability detected by Defender, there are a lot of applications detected in this and as per remediation step need to upgrade those. But this is not possible at the moment, Can we fix it or is it a thing...

  5. CVE-2023-49210 Critical Vulnerability OpenSSL

    in Windows 10 Software and Apps
    CVE-2023-49210 Critical Vulnerability OpenSSL: CVE-2023-49210 Critical Vulnerability OpenSSL-Hi Team about this vulnerability detected by Defender, there are a lot of applications detected in this and as per remediation step need to upgrade those. But this is not possible at the moment, Can we fix it or is it a thing...

  6. CVE-2023-49210 Critical Vulnerability OpenSSL

    in AntiVirus, Firewalls and System Security
    CVE-2023-49210 Critical Vulnerability OpenSSL: CVE-2023-49210 Critical Vulnerability OpenSSL-Hi Team about this vulnerability detected by Defender, there are a lot of applications detected in this and as per remediation step need to upgrade those. But this is not possible at the moment, Can we fix it or is it a thing...

  7. CVE-2023-38545 cURL vulnerability

    in Windows 10 Gaming
    CVE-2023-38545 cURL vulnerability: Hello!I have a lot of workstations affected by this that are being classified as vulnerable by Tenable. All of these have cURL onboard pre-installed on the machines. I see this means we have to wait for Microsoft to release an update. Can someone please provide any idea as to...

  8. Required KB Package exclusive to CVE-2023-23415 Vulnerability

    in Windows 10 Gaming
    Required KB Package exclusive to CVE-2023-23415 Vulnerability: Hi,Can someone help with the update Package exclusive to CVE-2023-23415 Vulnerability.I have a Win10 1607 and required a small package for the CVE-2023-23415 Vulnerability. Right now, the packages available in the catalog are around 1536.2 MB. which includes multiple other...

  9. Required KB Package exclusive to CVE-2023-23415 Vulnerability

    in Windows 10 Software and Apps
    Required KB Package exclusive to CVE-2023-23415 Vulnerability: Hi,Can someone help with the update Package exclusive to CVE-2023-23415 Vulnerability.I have a Win10 1607 and required a small package for the CVE-2023-23415 Vulnerability. Right now, the packages available in the catalog are around 1536.2 MB. which includes multiple other...

  10. Required KB Package exclusive to CVE-2023-23415 Vulnerability

    in Windows 10 Installation and Upgrade
    Required KB Package exclusive to CVE-2023-23415 Vulnerability: Hi,Can someone help with the update Package exclusive to CVE-2023-23415 Vulnerability.I have a Win10 1607 and required a small package for the CVE-2023-23415 Vulnerability. Right now, the packages available in the catalog are around 1536.2 MB. which includes multiple other...