USN-8927-1: curl vulnerabilities
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
Ubuntu security notice USN-8927-1 covers several curl flaws. CVE-2026-107928 is an out-of-bounds read in the WebSocket send path when curl is built with GnuTLS, which could expose sensitive information. CVE-2026-107929 omits the CURLOPT_INTERFACE binding from connection-reuse decisions, potentially sending traffic from an unintended address. A further issue, reported by Stanislav Fort, fails to clear AWS SigV4 authentication state when CURLOPT_AWS_SIGV4 is set to NULL; no exploitation is stated.
- CVE-2026-107928 is an out-of-bounds read in curl’s WebSocket send path with GnuTLS.
- CVE-2026-107929 can reuse connections from an unintended source address.
- A separate flaw may leave AWS SigV4 authentication state uncleared.
- Ubuntu published the fixes as USN-8927-1; exploitation is not reported.
Vulnerabilities mentionedAll →
- published —
- published —
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-107928 | NVD description · AI analysis pending | — | — |
It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-107928) Maksim discovered that curl did not correctly include the interface binding in connection reuse decisions when CURLOPT_INTERFACE was used. An attacker could possibly use this issue to cause connections to go out from an unintended source address. (CVE-2026-107929) Stanislav Fort discovered that curl did not properly clear AWS SigV4 authentication state when CURLOPT_AWS_SIGV4 was set to NULL. An attacker could possibly use this issue to obtain sensitive…
This source does not provide full text. Read it at ubuntu.com.