PT-2022-5975 · Libcurl+12 · Libcurl+12

Robbotic

·

Published

2022-10-26

·

Updated

2026-05-18

·

CVE-2022-32221

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.86.0
Description When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT READFUNCTION) to ask for data to send, even when the CURLOPT POSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.
Recommendations Update to libcurl version 7.86.0 or later to resolve the issue. As a temporary workaround, consider disabling the CURLOPT READFUNCTION callback when switching from a PUT to a POST request to minimize the risk of exploitation. Restrict access to the CURLOPT READFUNCTION callback to prevent unauthorized use. Avoid reusing handles for different types of requests to prevent confusion between PUT and POST requests.

Exploit

Fix

DoS

Information Disclosure

Exposure of Resource to Wrong Sphere

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2023:0333
ALT-PU-2022-2989
ALT-PU-2022-3017
ALT-PU-2022-3042
ALT-PU-2023-7318
ALT-PU-2023-7463
ALT-PU-2023-7647
ALT-PU-2023-7888
AZL-38548
BDU:2022-07403
CLEANSTART-2026-AY18527
CLEANSTART-2026-BW46578
CLEANSTART-2026-DI23929
CLEANSTART-2026-LQ42192
CLEANSTART-2026-OF85770
CVE-2022-32221
DLA-3288-1
DSA-5330-1
MGASA-2022-0405
OESA-2022-2039
OESA-2022-2040
OESA-2022-2041
OESA-2023-1834
OESA-2023-1835
OESA-2023-1836
OESA-2024-2071
OPENSUSE-SU-2022_3773-1
OPENSUSE-SU-2022_3785-1
OPENSUSE-SU-2024:12447-1
OPENSUSE-SU-2024:12714-1
RHSA-2022:8840
RHSA-2023:0333
RHSA-2023:4139
RHSA-2023_0333
RLSA-2023:0333
SUSE-SU-2022:3769-1
SUSE-SU-2022:3770-1
SUSE-SU-2022:3772-1
SUSE-SU-2022:3773-1
SUSE-SU-2022:3774-1
SUSE-SU-2022:3785-1
SUSE-SU-2022_3769-1
SUSE-SU-2022_3770-1
SUSE-SU-2022_3772-1
SUSE-SU-2022_3773-1
SUSE-SU-2022_3774-1
SUSE-SU-2022_3785-1
USN-5702-1
USN-5702-2
USN-5823-1
USN-5823-3

Affected Products

Alt Linux
Almalinux
Astra Linux
Ibm Aix
Linuxmint
Apple Macos
Mysql Server
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libcurl