CVE-2017-2628

CVE-2017-2628 is a critical vulnerability in curl, specifically affecting Red Hat Enterprise Linux 6 versions prior to 7.19.7-53. This flaw stems from an incomplete backport of a previous fix, leading to an authentication bypass due to incorrect handling of GSSAPI definitions. With a CVSS score of 9.8 (CRITICAL), it presents a high-impact threat with low attack complexity, allowing unauthenticated remote attackers to achieve full compromise (confidentiality, integrity, availability). While there is no evidence of active exploitation or publicly available exploit modules like Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.