HIGH✓ PATCH🇬🇧 English

CVE-2023-27533

CVSS 8.8v3.1pub. 2023-03-30upd. 2026-02-13

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Fedora Project Fedora
OS
Fedoraproject
36
Haxx Curl
APP
Haxx
7.0.0 – 7.881
Netapp Active Iq Unified Manager
APP
Netapp
wszystkie wersje
Netapp Clustered Data Ontap
APP
Netapp
9.0
Netapp H300s
HW
Netapp
wszystkie wersje
Netapp H300s Firmware
OS
Netapp
wszystkie wersje
Netapp H410s
HW
Netapp
wszystkie wersje
Netapp H410s Firmware
OS
Netapp
wszystkie wersje
Netapp H500s
HW
Netapp
wszystkie wersje
Netapp H500s Firmware
OS
Netapp
wszystkie wersje
Netapp H700s
HW
Netapp
wszystkie wersje
Netapp H700s Firmware
OS
Netapp
wszystkie wersje
Splunk Universal Forwarder
APP
Splunk
9.1.08.2.0 – 8.2.12 (bez)9.0.0 – 9.0.6 (bez)