PT-2022-7575 · Curl+11 · Curl+11
Bagders
·
Published
2022-11-07
·
Updated
2026-05-18
·
CVE-2022-43552
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
curl versions prior to 7.87.0
Description
A use after free vulnerability exists in curl. The issue arises when curl is asked to tunnel virtually all protocols it supports through an HTTP proxy, and the proxy denies such tunnel operations for specific protocols like SMB or TELNET. In the transfer shutdown code path, curl would use a heap-allocated struct after it had been freed. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For versions prior to 7.87.0, update to version 7.87.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of HTTP proxies that deny tunnel operations for SMB or TELNET protocols to minimize the risk of exploitation. Avoid using curl to tunnel these protocols through an HTTP proxy until the issue is resolved.
Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Ibm Aix
Linuxmint
Apple Macos
Red Hat
Red Os
Suse
Ubuntu
Curl