Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceSUSE-SU-2024:3080-1

SUSE-SU-2024:3080-1

MEDIUM4.8

Security update for curl

Published Sep 2, 2024

Modified 1 years ago

Fix available

Details

Description of the patch:

This update for curl fixes the following issues:

CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)

Affected Packages

libcurl4

SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise Desktop 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Installer Updates 15 SP4

Fixed in:

8.0.1-150400.5.47.1

curl

SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.47.1

libcurl-devel

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.47.1

libcurl4-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP5openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.47.1

libcurl-devel-32bit

openSUSE Leap 15.5

Fixed in:

8.0.1-150400.5.47.1

References

https://bugzilla.suse.com/1228535

https://lists.suse.com/pipermail/sle-updates/2024-September/036722.html

https://www.suse.com/security/cve/CVE-2024-7264/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2024/suse-su-20243080-1/

CVSS Analysis

CVSS v3.1

4.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

LowA:L

4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Upstream

Ecosystems(19)

SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Installer Updates 15 SP4

Timeline

PublishedSep 2, 2024

ModifiedSep 2, 2024

SUSE-SU-2024:3080-1 | Mondoo Vulnerability Intelligence