Log in Start free

Vulnerability · Published Sep 23, 2022 · Assigned by hackerone

CVE-2022-35252

Low 3.7

In plain English

A low-severity improper input validation in https://github.com/curl/curl. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)3.8%top 9.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8curl7.61.1-30.el8ALSA-2023:2963
AlmaLinux:9curl7.76.1-23.el9ALSA-2023:2478
AlmaLinux:9curl-minimal7.76.1-23.el9ALSA-2023:2478
AlmaLinux:8libcurl7.61.1-30.el8ALSA-2023:2963
AlmaLinux:9libcurl7.76.1-23.el9ALSA-2023:2478
AlmaLinux:8libcurl-devel7.61.1-30.el8ALSA-2023:2963
AlmaLinux:9libcurl-devel7.76.1-23.el9ALSA-2023:2478
AlmaLinux:8libcurl-minimal7.61.1-30.el8ALSA-2023:2963
AlmaLinux:9libcurl-minimal7.76.1-23.el9ALSA-2023:2478
Alpine:v3.20curl7.85.0-r0ALPINE-CVE-2022-35252
Alpine:v3.21curl7.85.0-r0ALPINE-CVE-2022-35252
Alpine:v3.22curl7.85.0-r0ALPINE-CVE-2022-35252
Alpine:v3.23curl7.85.0-r0ALPINE-CVE-2022-35252
Alpine:v3.24curl7.85.0-r0ALPINE-CVE-2022-35252
Debian:12curl7.85.0-1DEBIAN-CVE-2022-35252
Debian:13curl7.85.0-1DEBIAN-CVE-2022-35252
Debian:14curl7.85.0-1DEBIAN-CVE-2022-35252
Ubuntu:22.04:LTScurl7.81.0-1ubuntu1.4UBUNTU-CVE-2022-35252
Ubuntu:22.04:LTScurl7.81.0-1ubuntu1.4USN-5587-1

Affected products (as reported)

VendorProductVersions
n/a https://github.com/curl/curl Fixed in curl 7.85.0

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References