{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T14:06:52.162","vulnerabilities":[{"cve":{"id":"CVE-2024-2398","sourceIdentifier":"2499f714-1537-4658-8207-48ae4bb9eae9","published":"2024-03-27T08:15:41.283","lastModified":"2026-06-17T07:24:27.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."},{"lang":"es","value":"Cuando una aplicación le dice a libcurl que quiere permitir la inserción del servidor HTTP/2 y la cantidad de encabezados recibidos para la inserción supera el límite máximo permitido (1000), libcurl cancela la inserción del servidor. Al cancelar, libcurl inadvertidamente no libera todos los encabezados previamente asignados y, en cambio, pierde memoria. Además, esta condición de error falla silenciosamente y, por lo tanto, una aplicación no la detecta fácilmente."}],"affected":[{"source":"2499f714-1537-4658-8207-48ae4bb9eae9","affectedData":[{"vendor":"curl","product":"curl","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.0","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.0","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.0","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.0","versionType":"semver","status":"affected"},{"version":"8.2.1","lessThanOrEqual":"8.2.1","versionType":"semver","status":"affected"},{"version":"8.2.0","lessThanOrEqual":"8.2.0","versionType":"semver","status":"affected"},{"version":"8.1.2","lessThanOrEqual":"8.1.2","versionType":"semver","status":"affected"},{"version":"8.1.1","lessThanOrEqual":"8.1.1","versionType":"semver","status":"affected"},{"version":"8.1.0","lessThanOrEqual":"8.1.0","versionType":"semver","status":"affected"},{"version":"8.0.1","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"8.0.0","lessThanOrEqual":"8.0.0","versionType":"semver","status":"affected"},{"version":"7.88.1","lessThanOrEqual":"7.88.1","versionType":"semver","status":"affected"},{"version":"7.88.0","lessThanOrEqual":"7.88.0","versionType":"semver","status":"affected"},{"version":"7.87.0","lessThanOrEqual":"7.87.0","versionType":"semver","status":"affected"},{"version":"7.86.0","lessThanOrEqual":"7.86.0","versionType":"semver","status":"affected"},{"version":"7.85.0","lessThanOrEqual":"7.85.0","versionType":"semver","status":"affected"},{"version":"7.84.0","lessThanOrEqual":"7.84.0","versionType":"semver","status":"affected"},{"version":"7.83.1","lessThanOrEqual":"7.83.1","versionType":"semver","status":"affected"},{"version":"7.83.0","lessThanOrEqual":"7.83.0","versionType":"semver","status":"affected"},{"version":"7.82.0","lessThanOrEqual":"7.82.0","versionType":"semver","status":"affected"},{"version":"7.81.0","lessThanOrEqual":"7.81.0","versionType":"semver","status":"affected"},{"version":"7.80.0","lessThanOrEqual":"7.80.0","versionType":"semver","status":"affected"},{"version":"7.79.1","lessThanOrEqual":"7.79.1","versionType":"semver","status":"affected"},{"version":"7.79.0","lessThanOrEqual":"7.79.0","versionType":"semver","status":"affected"},{"version":"7.78.0","lessThanOrEqual":"7.78.0","versionType":"semver","status":"affected"},{"version":"7.77.0","lessThanOrEqual":"7.77.0","versionType":"semver","status":"affected"},{"version":"7.76.1","lessThanOrEqual":"7.76.1","versionType":"semver","status":"affected"},{"version":"7.76.0","lessThanOrEqual":"7.76.0","versionType":"semver","status":"affected"},{"version":"7.75.0","lessThanOrEqual":"7.75.0","versionType":"semver","status":"affected"},{"version":"7.74.0","lessThanOrEqual":"7.74.0","versionType":"semver","status":"affected"},{"version":"7.73.0","lessThanOrEqual":"7.73.0","versionType":"semver","status":"affected"},{"version":"7.72.0","lessThanOrEqual":"7.72.0","versionType":"semver","status":"affected"},{"version":"7.71.1","lessThanOrEqual":"7.71.1","versionType":"semver","status":"affected"},{"version":"7.71.0","lessThanOrEqual":"7.71.0","versionType":"semver","status":"affected"},{"version":"7.70.0","lessThanOrEqual":"7.70.0","versionType":"semver","status":"affected"},{"version":"7.69.1","lessThanOrEqual":"7.69.1","versionType":"semver","status":"affected"},{"version":"7.69.0","lessThanOrEqual":"7.69.0","versionType":"semver","status":"affected"},{"version":"7.68.0","lessThanOrEqual":"7.68.0","versionType":"semver","status":"affected"},{"version":"7.67.0","lessThanOrEqual":"7.67.0","versionType":"semver","status":"affected"},{"version":"7.66.0","lessThanOrEqual":"7.66.0","versionType":"semver","status":"affected"},{"version":"7.65.3","lessThanOrEqual":"7.65.3","versionType":"semver","status":"affected"},{"version":"7.65.2","lessThanOrEqual":"7.65.2","versionType":"semver","status":"affected"},{"version":"7.65.1","lessThanOrEqual":"7.65.1","versionType":"semver","status":"affected"},{"version":"7.65.0","lessThanOrEqual":"7.65.0","versionType":"semver","status":"affected"},{"version":"7.64.1","lessThanOrEqual":"7.64.1","versionType":"semver","status":"affected"},{"version":"7.64.0","lessThanOrEqual":"7.64.0","versionType":"semver","status":"affected"},{"version":"7.63.0","lessThanOrEqual":"7.63.0","versionType":"semver","status":"affected"},{"version":"7.62.0","lessThanOrEqual":"7.62.0","versionType":"semver","status":"affected"},{"version":"7.61.1","lessThanOrEqual":"7.61.1","versionType":"semver","status":"affected"},{"version":"7.61.0","lessThanOrEqual":"7.61.0","versionType":"semver","status":"affected"},{"version":"7.60.0","lessThanOrEqual":"7.60.0","versionType":"semver","status":"affected"},{"version":"7.59.0","lessThanOrEqual":"7.59.0","versionType":"semver","status":"affected"},{"version":"7.58.0","lessThanOrEqual":"7.58.0","versionType":"semver","status":"affected"},{"version":"7.57.0","lessThanOrEqual":"7.57.0","versionType":"semver","status":"affected"},{"version":"7.56.1","lessThanOrEqual":"7.56.1","versionType":"semver","status":"affected"},{"version":"7.56.0","lessThanOrEqual":"7.56.0","versionType":"semver","status":"affected"},{"version":"7.55.1","lessThanOrEqual":"7.55.1","versionType":"semver","status":"affected"},{"version":"7.55.0","lessThanOrEqual":"7.55.0","versionType":"semver","status":"affected"},{"version":"7.54.1","lessThanOrEqual":"7.54.1","versionType":"semver","status":"affected"},{"version":"7.54.0","lessThanOrEqual":"7.54.0","versionType":"semver","status":"affected"},{"version":"7.53.1","lessThanOrEqual":"7.53.1","versionType":"semver","status":"affected"},{"version":"7.53.0","lessThanOrEqual":"7.53.0","versionType":"semver","status":"affected"},{"version":"7.52.1","lessThanOrEqual":"7.52.1","versionType":"semver","status":"affected"},{"version":"7.52.0","lessThanOrEqual":"7.52.0","versionType":"semver","status":"affected"},{"version":"7.51.0","lessThanOrEqual":"7.51.0","versionType":"semver","status":"affected"},{"version":"7.50.3","lessThanOrEqual":"7.50.3","versionType":"semver","status":"affected"},{"version":"7.50.2","lessThanOrEqual":"7.50.2","versionType":"semver","status":"affected"},{"version":"7.50.1","lessThanOrEqual":"7.50.1","versionType":"semver","status":"affected"},{"version":"7.50.0","lessThanOrEqual":"7.50.0","versionType":"semver","status":"affected"},{"version":"7.49.1","lessThanOrEqual":"7.49.1","versionType":"semver","status":"affected"},{"version":"7.49.0","lessThanOrEqual":"7.49.0","versionType":"semver","status":"affected"},{"version":"7.48.0","lessThanOrEqual":"7.48.0","versionType":"semver","status":"affected"},{"version":"7.47.1","lessThanOrEqual":"7.47.1","versionType":"semver","status":"affected"},{"version":"7.47.0","lessThanOrEqual":"7.47.0","versionType":"semver","status":"affected"},{"version":"7.46.0","lessThanOrEqual":"7.46.0","versionType":"semver","status":"affected"},{"version":"7.45.0","lessThanOrEqual":"7.45.0","versionType":"semver","status":"affected"},{"version":"7.44.0","lessThanOrEqual":"7.44.0","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"curl","product":"curl","defaultStatus":"unknown","cpes":["cpe:2.3:a:curl:curl:7.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.44.0","lessThanOrEqual":"8.6.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-26T18:57:39.256472Z","id":"CVE-2024-2398","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*","versionStartIncluding":"7.44.0","versionEndExcluding":"8.7.0","matchCriteriaId":"B144E906-46DA-4C8A-862C-A7A89D1C25B4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionEndExcluding":"12.7.6","matchCriteriaId":"3556C7C3-14B6-4846-B3E8-FE07A503155F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0","versionEndExcluding":"13.6.8","matchCriteriaId":"7008225C-B5B9-4F87-9392-DD2080717E9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0","versionEndExcluding":"14.6","matchCriteriaId":"51E2E93B-C5A3-4C83-B806-2EC555AD45FE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","matchCriteriaId":"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*","matchCriteriaId":"CA277A6C-83EC-4536-9125-97B84C4FAF59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:*","matchCriteriaId":"A2119FFC-08F9-4C3F-881C-9C72916BC652"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*","matchCriteriaId":"95BA156C-C977-4F0C-8DFB-3FAE9CC8C02D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"89612649-BACF-4FAC-9BA4-324724FD93A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*","matchCriteriaId":"F3D9B255-C1AF-42D1-BF9B-13642FBDC080"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FD7CFE0E-9D1E-4495-B302-89C3096FC0DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*","matchCriteriaId":"F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5921A877-18BF-43FE-915C-D226E140ACFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*","matchCriteriaId":"7296A1F2-D315-4FD5-8A73-65C480C855BE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2024/Jul/18","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/19","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/20","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/27/3","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Mailing List","Third Party Advisory"]},{"url":"https://curl.se/docs/CVE-2024-2398.html","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Vendor Advisory"]},{"url":"https://curl.se/docs/CVE-2024-2398.json","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Vendor Advisory"]},{"url":"https://hackerone.com/reports/2402845","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240503-0009/","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT214118","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214119","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214120","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Release Notes","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/27/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://curl.se/docs/CVE-2024-2398.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://curl.se/docs/CVE-2024-2398.json","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://hackerone.com/reports/2402845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240503-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT214118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}}]}