6.5

CVE-2024-7264: ASN.1 date parser overread

Modified
AliasesALPINE-CVE-2024-7264SUSE-SU-2024:2930-1SUSE-SU-2024:2938-1
Published 31-07-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-7264 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in curl. EPSS estimates a 20.22% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Routine

Not severe (CVSS 6.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
6.5/10
010
Medium · v3.1 (NVD)
EPSS score
20.22%
0%100%
High · +2.92 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 5 · Related 5
RHSA-2025:1671RHSA-2025:1673SUSE-SU-2024:2784-1SUSE-SU-2024:3202-1SUSE-SU-2025:20029-1CGA-962M-89HC-RMJQ

Timeline

  1. 31-07-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

20.22%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

Increase +2.92 pp

From 17.30% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (hackerone.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse17 products
  • curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 8.0.1-150400.5.47.1
  • curl&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 8.0.1-150400.5.47.1
  • curl&distro=SUSE Linux Enterprise Installer Updates 15 SP4< 8.0.1-150400.5.47.1
  • curl&distro=SUSE Linux Enterprise Installer Updates 15 SP5< 8.0.1-150400.5.47.1
  • curl&distro=SUSE Linux Enterprise Micro 5.1< 7.66.0-150200.4.75.1
Opensuse3 products
  • curl&distro=openSUSE Leap 15.5< 8.0.1-150400.5.47.1
  • curl&distro=openSUSE Leap Micro 5.5< 8.0.1-150400.5.47.1
  • curl&distro=openSUSE Tumbleweed< 8.9.1-1.1
Chainguard2 products
  • curl< 8.9.1-r0
  • libcurl4All versions (No fix recorded)
Wolfi2 products
  • curl< 8.9.1-r0
  • libcurl4All versions (No fix recorded)
Alpine1 product
  • curl< 8.9.1-r0
Curl1 product
  • curl8.9.0 | 8.8.0 | 8.7.1 | 8.7.0 | 8.6.0 | 8.5.0 | 8.4.0 | 8.3.0 | 8.2.1 | 8.2.0 | 8.1.2 | 8.1.1 | 8.1.0 | 8.0.1 | 8.0.0 | 7.88.1 | 7.88.0 | 7.87.0 | 7.86.0 | 7.85.0 | 7.84.0 | 7.83.1 | 7.83.0 | 7.82.0 | 7.81.0 | 7.80.0 | 7.79.1 | 7.79.0 | 7.78.0 | 7.77.0 | 7.76.1 | 7.76.0 | 7.75.0 | 7.74.0 | 7.73.0 | 7.72.0 | 7.71.1 | 7.71.0 | 7.70.0 | 7.69.1 | 7.69.0 | 7.68.0 | 7.67.0 | 7.66.0 | 7.65.3 | 7.65.2 | 7.65.1 | 7.65.0 | 7.64.1 | 7.64.0 | 7.63.0 | 7.62.0 | 7.61.1 | 7.61.0 | 7.60.0 | 7.59.0 | 7.58.0 | 7.57.0 | 7.56.1 | 7.56.0 | 7.55.1 | 7.55.0 | 7.54.1 | 7.54.0 | 7.53.1 | 7.53.0 | 7.52.1 | 7.52.0 | 7.51.0 | 7.50.3 | 7.50.2 | 7.50.1 | 7.50.0 | 7.49.1 | 7.49.0 | 7.48.0 | 7.47.1 | 7.47.0 | 7.46.0 | 7.45.0 | 7.44.0 | 7.43.0 | 7.42.1 | 7.42.0 | 7.41.0 | 7.40.0 | 7.39.0 | 7.38.0 | 7.37.1 | 7.37.0 | 7.36.0 | 7.35.0 | 7.34.0 | 7.33.0 | 7.32.0
Debian1 product
  • curl< 7.88.1-10+deb12u7 | < 8.9.1-1
Haxx1 product
Ubuntu1 product
  • curl< 7.68.0-1ubuntu2.23 | < 7.81.0-1ubuntu1.17 | < 8.5.0-2ubuntu10.2 | < 7.35.0-1ubuntu2.20+esm18 | < 7.47.0-1ubuntu2.19+esm13 | < 7.58.0-2ubuntu3.24+esm5

9 vendors · 29 products

References

25 links
Show all 25 references