Wind River Support Network

Home CVE Database CVE-2023-28321

CVE-2023-28321

An improper certificate validation vulnerability exists in curl

Priority: LOW

CVSS v3: 5.9

Component: curl

Publish Date: May 18, 2023

Related ID: --

CVSS v2: MEDIUM

Modified Date: May 18, 2023

Find out more about CVE-2023-28321 from the MITRE-CVE dictionary and NIST NVD

Product Name	Status	Defect	Fixed	Downloads
Linux
Wind River Linux LTS 17	Requires LTSS	--	--	--
Wind River Linux 8	Requires LTSS	--	--	--
Wind River Linux 9	Requires LTSS	--	--	--
Wind River Linux 7	Requires LTSS	--	--	--
Wind River Linux LTS 21	Fixed	LIN1021-5803	10.21.20.21	--
Wind River Linux LTS 22	Fixed	LIN1022-4321	10.22.33.9(hot fix)	--
Wind River Linux LTS 18	Won't Fix	--	--	--
Wind River Linux LTS 19	Fixed	LIN1019-9838	10.19.45.29	--
Wind River Linux CD release	N/A	--	--	--
Wind River Linux 6	Requires LTSS	--	--	--
Wind River Linux LTS 23	Fixed	LIN1023-604	10.23.30.1	--
VxWorks
VxWorks 7	Vulnerable	--	--	--
VxWorks 6.9	Vulnerable	--	--	--
Helix Virtualization Platform Cert Edition
Helix Virtualization Platform Cert Edition	Not Vulnerable	--	--	--

Product Name	Status	Defect	Fixed	Downloads

Notes
Requires LTSS - customers must have active LTSS (Long Term Security Shield) Support to receive up-to-date information about vulnerabilities that may affect legacy software. Please contact your Wind River account team or see https://docs.windriver.com/bundle/Support_and_Maintenance_Supplemental_Terms_and_Conditions and https://support2.windriver.com/index.php?page=plc for more information.