Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,591 questions
That doesn't answer the question at all. Microsoft has zero published info about cve -2013-32001.
Inquiring about Windows 10 patching for Curl vulnerability CVE-2023-32001
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 0%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIL%3C/text%3E%3C/svg%3E)
Irene Lamprea
70
Reputation points
Hello,
I am wondering if the monthly patching updates for Windows 10 include updates for Curl.exe to address the vulnerability CVE-2023-32001.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 33%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBB%3C/text%3E%3C/svg%3E)
Bruce Bading 15 Reputation points2023-10-08T17:28:35.1166667+00:00 High vulnerabilities exist in Curl on Windows Servers, Win10 and Win11 and Microsoft has no clear path to address.
Sign in to comment
Accepted answer
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 2%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBD%3C/text%3E%3C/svg%3E)
Brent Dooley 95 Reputation points2023-08-14T22:52:53.7933333+00:00 -
Irene Lamprea 70 Reputation points
2023-08-18T18:45:13.7366667+00:00 hoping that they will include the update in September
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 37%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERD%3C/text%3E%3C/svg%3E)
Raymond Doetjes 55 Reputation points2023-08-22T07:17:02.2533333+00:00 I have been tracking this for the last 2 weeks and I can't find anything at MS.
Sign in to comment -
3 additional answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2023-08-09T20:03:31.6033333+00:00 Some time in the future it could be.
https://nvd.nist.gov/vuln/detail/CVE-2023-32001
https://msrc.microsoft.com/update-guide/vulnerability
--please don't forget to
upvoteandAccept as answerif the reply is helpful---
Anonymous
2023-08-10T12:18:36.73+00:00 Just checking if there's any progress or updates?
--please don't forget to
upvoteandAccept as answerif the reply is helpful-- -
Irene Lamprea 70 Reputation points
2023-08-18T18:43:50.3966667+00:00 Hoping they will include the updates in September
-
Bruce Bading 15 Reputation points
2023-10-12T23:17:35.2533333+00:00 Microsoft needs to address the issue in their patch management process. Any attempt to address it outside of Microsoft's patch process is not supported and manipulating or replacing system32 objects can create additional usability and security issues. CVE-2023-38039 was not addressed in this month's patch Tuesday on October 11. Microsoft security response center should be contacted at https://msrc.microsoft.com/report/vulnerability
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 97%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Dattatray Shejawal 0 Reputation points2023-08-31T06:49:44.1233333+00:00 Hi,
Is there any other option to remove this CVE-2023-32001 in Windows server.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 17%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
Patrick 5 Reputation points2023-08-31T12:08:12.0766667+00:00 Hello everyone,
Given the discussions above, I'm also facing a similar situation with the mentioned vulnerability on my Windows Server 2019. I noticed that NIST.GOV has rejected this CVE (https://nvd.nist.gov/vuln/detail/CVE-2023-32001). Does this mean that the vulnerability is not a concern anymore?
Has anyone received any further updates or clarifications either from Microsoft or Tenable regarding this? Is it advisable to wait for an official statement from either party before taking any action?
Thank you for any insights you can provide.
Best regards,
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 19%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEH%3C/text%3E%3C/svg%3E)
Eric Howard 0 Reputation points2023-08-31T15:22:01.4933333+00:00 I'm wondering the same thing. The CVE now has this information:
Current Description
** REJECT ** We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
So it appears there is still a security vulnerability, but there's no way to mitigate it.
Sign in to comment -