MEDIUM 5.9 Microsoft
CVE-2022-43552
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.
Microsoft Security Update 2023-Feb: A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.
Affected Products
- azl3 cmake 3.21.4-10 on Azure Linux 3.0
- cm1 rust 1.59.0-1 on CBL Mariner 1.0
- cm1 mysql 8.0.32-1 on CBL Mariner 1.0
- cm1 curl 7.86.0-3 on CBL Mariner 1.0
- cm1 cmake 3.21.4-3 on CBL Mariner 1.0
- cbl2 rust 1.72.0-2 on CBL Mariner 2.0
- cbl2 mysql 8.0.33-1 on CBL Mariner 2.0
- cbl2 curl 7.86.0-3 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-43552
- https://nvd.nist.gov/vuln/detail/CVE-2022-43552
This medium severity vulnerability with a CVSS score of 5.9 was published on 2023-02-14 via Microsoft. Affected: azl3 cmake 3.21.4-10 on Azure Linux 3.0, cm1 rust 1.59.0-1 on CBL Mariner 1.0, cm1 mysql 8.0.32-1 on CBL Mariner 1.0 and 5 more.
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.