Vulnerability · Published Jun 1, 2022 · Assigned by hackerone

CVE-2022-27781

High 7.5

In plain English

A high-severity uncontrolled resource consumption in https://github.com/curl/curl. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)2.9%top 13.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.20	curl	7.83.1-r0	ALPINE-CVE-2022-27781
Alpine:v3.21	curl	7.83.1-r0	ALPINE-CVE-2022-27781
Alpine:v3.22	curl	7.83.1-r0	ALPINE-CVE-2022-27781
Alpine:v3.23	curl	7.83.1-r0	ALPINE-CVE-2022-27781
Alpine:v3.24	curl	7.83.1-r0	ALPINE-CVE-2022-27781
Debian:12	curl	7.83.1-1	DEBIAN-CVE-2022-27781
Debian:13	curl	7.83.1-1	DEBIAN-CVE-2022-27781
Debian:14	curl	7.83.1-1	DEBIAN-CVE-2022-27781
Ubuntu:22.04:LTS	curl	7.81.0-1ubuntu1.2	UBUNTU-CVE-2022-27781
Ubuntu:22.04:LTS	curl	7.81.0-1ubuntu1.2	USN-5412-1

Affected products (as reported)

Vendor	Product	Versions
n/a	https://github.com/curl/curl	Fixed in 7.83.1

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References