Input validation error in cURL - CVE-2022-35252

Vulnerability identifier: #VU66881

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2022-35252

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
cURL
PowerSC
Oracle Linux
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
macOS
Oracle Solaris
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
Fedora
SINAMICS GL150
SINAMICS SL150
SINAMICS PERFECT HARMONY GH180 6SR5
LANTIME Operating System Firmware (LTOS)
SCALANCE S615
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
Telemetry Dashboard
Liquidware
Citrix Workspace App
Webex App VDI
cflinuxfs3
ObjectScale
EMC ECS
IBM Cloud Pak for Watson AIOps
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Watson Studio on Cloud Pak for Data
IBM supplied MQ Advanced container images
IBM Engineering Requirements Management DOORS Next
EMC Cloud Tiering Appliance
Self Node Remediation Operator
Service Telemetry Framework
Migration Toolkit for Virtualization
EasyApache
IBM Spectrum Protect Plus
IBM MQ Operator
IBM Spectrum Copy Data Management
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Rational ClearCase
IBM Security Verify Governance
IBM QRadar WinCollect Agent
IBM Robotic Process Automation
JBoss Core Services
Splunk Universal Forwarder
Splunk Enterprise
Dell EMC NetWorker vProxy
Cisco Jabber
Cisco Webex Meetings
VMware Horizon Client
Dell EMC Container Storage Modules
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libcurl3 (Ubuntu package)
libcurl3-nss (Ubuntu package)
curl (Ubuntu package)
libcurl4 (Ubuntu package)
libcurl3-gnutls (Ubuntu package)
libcurl4-32bit
curl-debugsource
curl-debuginfo
curl
libcurl4
libcurl4-debuginfo-32bit
libcurl4-debuginfo
libcurl-devel
libcurl4-32bit-debuginfo
curl (Red Hat package)
libcurl-devel-32bit
curl-help
libcurl
net-misc/curl
jbcs-httpd24-curl (Red Hat package)
SINEC NMS
Red Hat OpenShift GitOps
SCALANCE XCM332
SCALANCE MUM856-1 (EU)
SCALANCE M876-4 (EU)
SCALANCE MUM856-1 (RoW)
SCALANCE S615 EEC
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
SCALANCE M876-3 (EVDO)
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
RUGGEDCOM RM1224 LTE(4G) EU
RUGGEDCOM RM1224 LTE(4G) NAM
SCALANCE M804PB
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the way curl handles cookies with control codes (byte values below 32). When cookies that contain such control codes are later sent back to an HTTP(S) server, it might make the server return a 400 response, effectively allowing a "sister site" to deny service to siblings.

Install updates from vendor's website.

• https://curl.haxx.se/docs/CVE-2022-35252.html