Incorrect Implementation of Authentication Algorithm in cURL - CVE-2022-27782

Vulnerability identifier: #VU63009

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-27782

CWE-ID: CWE-303

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the way libcurl handles previously used connections in a connection pool for subsequent transfers. Several TLS and SSH settings were left out from the configuration match checks, resulting in erroneous matches for different resources. As a result, libcurl can send authentication string from one resource to another, exposing credentials to a third-party.

cURL
Cloud Pak for Security (CP4S)
My Cloud PR2100
WD Cloud
My Cloud EX2100
My Cloud DL4100
My Cloud DL2100
My Cloud PR4100
My Cloud EX4100
My Cloud EX2 Ultra
My Cloud Mirror G2
Amazon Linux AMI
Gentoo Linux
PowerSC
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Oracle Linux
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
Ubuntu
openEuler
Fedora
My Cloud OS 5
My Cloud
cflinuxfs3
Telemetry Dashboard
Liquidware
IBM supplied MQ Advanced container images
Citrix Workspace App
Webex App VDI
EMC ECS
IBM Cloud Pak for Watson AIOps
Platform Automation Toolkit
DB2 on Cloud Pak for Data
DB2 Warehouse on Cloud Pak for Data
Watson Studio on Cloud Pak for Data
IBM Engineering Requirements Management DOORS Next
Dell Data Protection Central
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Data Lakehouse
IBM MQ Operator
IBM Spectrum Copy Data Management
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
Dell Secure Connect Gateway
OpenShift Logging
IBM Rational ClearCase
Oracle HTTP Server
Netcool Operations Insight
Isolation Segment
VMware Tanzu Application Service for VMs
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
PowerProtect Data Domain
IBM Spectrum Protect Plus
Red Hat OpenStack
IBM Robotic Process Automation
Migration Toolkit for Containers
VMware Horizon Client
HPE Moonshot 1500 Chassis Manager
Red Hat OpenShift Container Platform
Dell EMC NetWorker vProxy
Splunk Enterprise
Red Hat Ceph Storage
Splunk Universal Forwarder
SecurID Authentication Manager
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
curl (Ubuntu package)
libcurl4 (Ubuntu package)
libcurl3-nss (Ubuntu package)
libcurl3-gnutls (Ubuntu package)
curl-debuginfo
curl
libcurl4-debuginfo
libcurl4-debuginfo-32bit
libcurl4
libcurl4-32bit
curl-debugsource
libcurl-devel
libcurl4-32bit-debuginfo
libcurl-minimal
libcurl
curl (Red Hat package)
libcurl-devel-32bit
curl-help
curl (Debian package)
net-misc/curl
PeopleSoft Enterprise PeopleTools
Cisco Jabber
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Cisco Webex Meetings
Red Hat OpenShift Serverless
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
RUGGEDCOM ROX RX1511
RUGGEDCOM ROX RX1510
RUGGEDCOM ROX RX1501
RUGGEDCOM ROX RX1500
RUGGEDCOM ROX RX1400
RUGGEDCOM ROX RX5000
RUGGEDCOM ROX MX5000RE
RUGGEDCOM ROX MX5000
RUGGEDCOM ROX RX1512
RUGGEDCOM ROX RX1524
RUGGEDCOM ROX RX1536
PowerScale OneFS
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC VxRail Appliance

Install updates from vendor's website.

cURL - update to 7.83.1
cflinuxfs3 - update to 0.296.0
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.0.1
Data Lakehouse - update to 1.1.0.0
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
IBM MQ Operator - addressed in versions 1.3.6, 2.0.1
Migration Toolkit for Containers - update to 1.7.3
Cloud Pak for Security (CP4S) - update to 1.10.7.0
IBM Spectrum Copy Data Management - update to 2.2.17
Red Hat Advanced Cluster Management for Kubernetes - update to 2.5.1
Red Hat Advanced Cluster Security for Kubernetes - update to 3.71
Dell EMC NetWorker vProxy - update to 4.3.0-32
Dell Secure Connect Gateway - update to 5.12.00.10
OpenShift Logging - addressed in versions 5.2.13, 5.3.10, 5.4.3
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
IBM Rational ClearCase - addressed in versions 9.0.1.14, 9.0.2.6, 9.1.0.3
Splunk Universal Forwarder - addressed in versions 8.1.14, 8.2.11, 9.0.5
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
SecurID Authentication Manager - addressed in versions 8.6 Patch 4, 8.7 Patch 1
IBM supplied MQ Advanced container images - addressed in versions 9.2.0.6-r1, 9.3.0.0-r2
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
Netcool Operations Insight - update to 1.6.7
Red Hat OpenShift Serverless - update to 1.24.0
Isolation Segment - addressed in versions 2.7.45, 2.10.25, 2.11.14, 2.12.8
VMware Tanzu Application Service for VMs - addressed in versions 2.7.50, 2.10.32, 2.11.20, 2.12.13, 2.13.5
RUGGEDCOM ROX RX1511 - update to 2.16.0
RUGGEDCOM ROX RX1510 - update to 2.16.0
RUGGEDCOM ROX RX1501 - update to 2.16.0
RUGGEDCOM ROX RX1500 - update to 2.16.0
RUGGEDCOM ROX RX1400 - update to 2.16.0
RUGGEDCOM ROX RX5000 - update to 2.16.0
RUGGEDCOM ROX MX5000RE - update to 2.16.0
RUGGEDCOM ROX MX5000 - update to 2.16.0
RUGGEDCOM ROX RX1512 - update to 2.16.0
RUGGEDCOM ROX RX1524 - update to 2.16.0
RUGGEDCOM ROX RX1536 - update to 2.16.0
EMC ECS - update to 3.8.0.2
IBM Cloud Transformation Advisor - update to 3.10.0
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
IBM Cloud Pak for Watson AIOps - update to 4.1.1
Platform Automation Toolkit - addressed in versions 4.4.29, 5.0.22
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.0
DB2 on Cloud Pak for Data - update to 4.8.2
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
Red Hat OpenShift Container Platform - update to 4.11.0
OpenShift Virtualization - update to 4.11.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.11.0
Watson Studio on Cloud Pak for Data - update to 5.0.3
My Cloud OS 5 - update to 5.25.124
Dell EMC VxRail Appliance - addressed in versions 7.0.372, 8.0.000
PowerProtect Data Domain - addressed in versions 7.7.4, 7.10.0.0
curl (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2
libcurl4 (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2
libcurl3-nss (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2
libcurl3-gnutls (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.18, 7.68.0-1ubuntu2.11, 7.74.0-1.3ubuntu2.2, 7.81.0-1ubuntu1.2
curl-debuginfo - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
curl - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
libcurl4-debuginfo - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
libcurl4-debuginfo-32bit - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2
libcurl4 - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
libcurl4-32bit - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
curl-debugsource - addressed in versions 7.60.0-4.38.1, 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
libcurl-devel - addressed in versions 7.60.0-11.40.2, 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
libcurl4-32bit-debuginfo - addressed in versions 7.60.0-150000.33.1, 7.66.0-150200.4.33.1
curl - addressed in versions 7.61.1-12.101, 7.87.0-2
libcurl-minimal - update to 7.61.1-22
libcurl-devel - update to 7.61.1-22
libcurl - update to 7.61.1-22
curl - update to 7.61.1-22
curl (Red Hat package) - update to 7.61.1-22.el8_6.3
libcurl-devel-32bit - update to 7.66.0-150200.4.33.1
libcurl - update to 7.71.1-14
curl-debuginfo - update to 7.71.1-14
curl - update to 7.71.1-14
curl-help - update to 7.71.1-14
curl-debugsource - update to 7.71.1-14
libcurl-devel - update to 7.71.1-14
curl (Debian package) - update to 7.74.0-1.3+deb11u2
curl - addressed in versions 7.76.1-16.fc34, 7.79.1-4.fc35, 7.82.0-5.fc36
net-misc/curl - update to 7.86.0
PowerScale OneFS - addressed in versions 9.1.0.26, 9.2.1.19, 9.4.0.10
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.7
IBM Spectrum Protect Plus - update to 10.1.12
Red Hat OpenStack - update to 16.2.z
Dell Data Protection Central - update to 19.9
IBM Robotic Process Automation - update to 21.0.3

• https://curl.haxx.se/docs/CVE-2022-27782.html

• Multiple vulnerabilities in cURL
• Ubuntu update for curl
• Slackware Linux update for curl
• Multiple vulnerabilities in cflinuxfs3
• Red Hat Enterprise Linux 8.6 update for curl
• Red Hat Enterprise Linux 9 update for curl
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.5
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenStack 16.2
• Multiple vulnerabilities in IBM Rational ClearCase
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Debian update for curl
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in Openshift Logging 5.2
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Red Hat Ceph Storage 5.2
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Serverless
• SUSE update for curl
• SUSE update for curl
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in Dell EMC NetWorker vProxy
• Multiple vulnerabilities in OpenShift Virtualization
• Multiple vulnerabilities in Dell VxRail
• Multiple vulnerabilities in IBM PowerSC
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in Western Digital My Cloud OS 5
• Amazon Linux AMI update for curl
• Gentoo update for curl
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in Dell Technologies PowerProtect DD
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• SUSE update for curl
• SUSE update for curl
• Multiple vulnerabilities in Dell ECS
• VMware Tanzu products update for curl
• Splunk Universal Forwarder update for third-party packages
• Incorrect implementation of authentication algorithm in IBM Watson Speech Services Cartridge
• IBM AIX update for cURL
• Multiple vulnerabilities in Siemens RUGGEDCOM ROX devices
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Dell Data Protection Central
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS/DWA
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• openEuler update for curl
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Amazon Linux AMI update for curl
• Multiple vulnerabilities in HPE Moonshot 1500 Chassis Manager
• Fedora 36 update for curl
• Fedora 34 update for curl
• Fedora 35 update for curl
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Anolis OS update for curl
• SecurID Authentication Manager update for third-party components
• SecurID Authentication Manager update for third-party components