Input validation error in cURL - CVE-2022-35252

Vulnerability identifier: #VU66881

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-35252

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the way curl handles cookies with control codes (byte values below 32). When cookies that contain such control codes are later sent back to an HTTP(S) server, it might make the server return a 400 response, effectively allowing a "sister site" to deny service to siblings.

cURL
PowerSC
Oracle Linux
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
macOS
Oracle Solaris
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
Fedora
SINAMICS GL150
SINAMICS SL150
SINAMICS PERFECT HARMONY GH180 6SR5
LANTIME Operating System Firmware (LTOS)
SCALANCE S615
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
Telemetry Dashboard
Liquidware
Citrix Workspace App
Webex App VDI
cflinuxfs3
ObjectScale
EMC ECS
IBM Cloud Pak for Watson AIOps
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Watson Studio on Cloud Pak for Data
IBM supplied MQ Advanced container images
IBM Engineering Requirements Management DOORS Next
EMC Cloud Tiering Appliance
Self Node Remediation Operator
Service Telemetry Framework
Migration Toolkit for Virtualization
EasyApache
IBM Spectrum Protect Plus
IBM MQ Operator
IBM Spectrum Copy Data Management
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Rational ClearCase
IBM Security Verify Governance
IBM QRadar WinCollect Agent
IBM Robotic Process Automation
JBoss Core Services
Splunk Universal Forwarder
Splunk Enterprise
Dell EMC NetWorker vProxy
Cisco Jabber
Cisco Webex Meetings
VMware Horizon Client
Dell EMC Container Storage Modules
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libcurl3 (Ubuntu package)
libcurl3-nss (Ubuntu package)
curl (Ubuntu package)
libcurl4 (Ubuntu package)
libcurl3-gnutls (Ubuntu package)
libcurl4-32bit
curl-debugsource
curl-debuginfo
curl
libcurl4
libcurl4-debuginfo-32bit
libcurl4-debuginfo
libcurl-devel
libcurl4-32bit-debuginfo
curl (Red Hat package)
libcurl-devel-32bit
curl-help
libcurl
net-misc/curl
jbcs-httpd24-curl (Red Hat package)
SINEC NMS
Red Hat OpenShift GitOps
SCALANCE XCM332
SCALANCE MUM856-1 (EU)
SCALANCE M876-4 (EU)
SCALANCE MUM856-1 (RoW)
SCALANCE S615 EEC
SCALANCE MUM853-1 (EU)
SCALANCE M876-4 (NAM)
SCALANCE M816-1 ADSL-Router (Annex A)
SCALANCE M876-4
SCALANCE M876-3 (ROK)
SCALANCE M876-3 (EVDO)
SCALANCE M874-3
SCALANCE M874-2
SCALANCE M826-2 SHDSL-Router
SCALANCE M816-1 ADSL-Router (Annex B)
RUGGEDCOM RM1224 LTE(4G) EU
RUGGEDCOM RM1224 LTE(4G) NAM
SCALANCE M804PB
SCALANCE M812-1 ADSL-Router (Annex A)
SCALANCE M812-1 ADSL-Router (Annex B)

Install updates from vendor's website.

cURL - update to 7.85.0
Self Node Remediation Operator - update to 0.5.1
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Virtualization - update to 2.4.3
JBoss Core Services - update to 2.4.51 SP1
EasyApache - update to 4 2022-9-7
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
LANTIME Operating System Firmware (LTOS) - addressed in versions 6.24.035, 7.06.008
Splunk Universal Forwarder - addressed in versions 8.1.14, 8.2.11, 9.0.5
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM Spectrum Protect Plus - update to 10.1.13
macOS - addressed in versions 11.7.3 20G1116, 12.6.3 21G419, 13.1 22C65
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-32.el7jbcs, 0.4.10-32.el8jbcs
cflinuxfs3 - update to 0.320.0
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-17.el7jbcs, 1.0.0-17.el8jbcs
SINEC NMS - update to 1.0.3.1
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.17-13.el7jbcs, 1.3.17-13.el8jbcs
ObjectScale - update to 1.4.0
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs
Dell EMC Container Storage Modules - update to 1.7.0
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-20.el7jbcs, 1.15.19-20.el8jbcs
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs
IBM MQ Operator - addressed in versions 2.0.11, 2.3.3
SCALANCE XCM332 - update to 2.2
IBM Spectrum Copy Data Management - update to 2.2.20.1
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.0-18.el7jbcs, 2.4.0-18.el8jbcs
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-22.el7jbcs, 2.9.3-22.el8jbcs
EMC ECS - update to 3.8.0.2
IBM Cloud Transformation Advisor - update to 3.10.0
IBM Cloud Pak for Watson AIOps - update to 4.2.0
Dell EMC NetWorker vProxy - update to 4.3.0-36
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
DB2 on Cloud Pak for Data - update to 4.8.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.4
Watson Studio on Cloud Pak for Data - update to 5.0.3
SCALANCE MUM856-1 (EU) - update to 7.2
SCALANCE M876-4 (EU) - update to 7.2
SCALANCE MUM856-1 (RoW) - update to 7.2
SCALANCE S615 - update to 7.2
SCALANCE S615 EEC - update to 7.2
SCALANCE MUM853-1 (EU) - update to 7.2
SCALANCE M876-4 (NAM) - update to 7.2
SCALANCE M816-1 ADSL-Router (Annex A) - update to 7.2
SCALANCE M876-4 - update to 7.2
SCALANCE M876-3 (ROK) - update to 7.2
SCALANCE M876-3 (EVDO) - update to 7.2
SCALANCE M874-3 - update to 7.2
SCALANCE M874-2 - update to 7.2
SCALANCE M826-2 SHDSL-Router - update to 7.2
SCALANCE M816-1 ADSL-Router (Annex B) - update to 7.2
RUGGEDCOM RM1224 LTE(4G) EU - update to 7.2
RUGGEDCOM RM1224 LTE(4G) NAM - update to 7.2
SCALANCE M804PB - update to 7.2
SCALANCE M812-1 ADSL-Router (Annex A) - update to 7.2
SCALANCE M812-1 ADSL-Router (Annex B) - update to 7.2
libcurl3 (Ubuntu package) - update to 7.47.01ubuntu2.19+esm4
libcurl3-nss (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4
curl (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4
libcurl4 (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4
libcurl3-gnutls (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.20, 7.68.0-1ubuntu2.13, 7.81.0-1ubuntu1.4
libcurl4-32bit - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
curl-debugsource - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
curl-debuginfo - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
curl - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
libcurl4 - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
libcurl4-debuginfo-32bit - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1
libcurl4-debuginfo - addressed in versions 7.60.0-4.43.1, 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
libcurl-devel - addressed in versions 7.60.0-11.46.1, 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
libcurl4-32bit-debuginfo - addressed in versions 7.60.0-150000.38.1, 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
curl - addressed in versions 7.61.1-12.101, 7.87.0-2
curl (Red Hat package) - addressed in versions 7.61.1-30.el8, 7.76.1-23.el9
libcurl-devel-32bit - addressed in versions 7.66.0-150200.4.39.1, 7.79.1-150400.5.6.1
curl-debugsource - update to 7.71.1-18
curl - update to 7.71.1-18
libcurl-devel - update to 7.71.1-18
curl-debuginfo - update to 7.71.1-18
curl-help - update to 7.71.1-18
libcurl - update to 7.71.1-18
curl - addressed in versions 7.79.1-6.fc35, 7.82.0-8.fc36, 7.85.0-1.fc37
curl - update to 7.85.0
net-misc/curl - update to 7.86.0
jbcs-httpd24-curl (Red Hat package) - addressed in versions 7.86.0-2.el7jbcs, 7.86.0-2.el8jbcs
IBM Rational ClearCase - addressed in versions 9.0.2.7, 9.1.0.4, 10.0.0.1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.5-r2, 9.3.2.1-r2
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.7
IBM Security Verify Governance - update to 10.0.2.0.2
IBM QRadar WinCollect Agent - update to 10.1.1
EMC Cloud Tiering Appliance - update to 13.1.0.2.29
IBM Robotic Process Automation - addressed in versions 21.0.7.8, 23.0.9

• https://curl.haxx.se/docs/CVE-2022-35252.html

• Denial of service in cURL
• Slackware Linux update for curl
• Ubuntu update for curl
• Cloud Foundry Foundation cflinuxfs3 update for curl
• SUSE update for curl
• SUSE update for curl
• SUSE update for curl
• cPanel EasyApache update for cURL
• SUSE update for curl
• SUSE update for curl
• Multiple vulnerabilities in Dell EMC Data Protection Central
• Multiple vulnerabilities in Dell NetWorker vProxy
• Red Hat JBoss Core Services update for Apache HTTP Server
• Amazon Linux AMI update for curl
• Multiple vulnerabilities in IBM QRadar Wincollect agent
• Gentoo update for curl
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in Apple macOS Big Sur
• Multiple vulnerabilities in Apple macOS Monterey
• Multiple vulnerabilities in IBM PowerSC
• Multiple vulnerabilities in IBM Rational ClearCase
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Siemens RUGGEDCOM and SCALANCE Products
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Siemens SCALANCE XCM332
• Red Hat Enterprise Linux 9 update for curl
• Multiple vulnerabilities in Siemens SINEC NMS
• Red Hat Enterprise Linux 8 update for curl
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Splunk Universal Forwarder update for third-party packages
• Multiple vulnerabilities in Siemens Integrated SCALANCE S615 of SINAMICS Medium Voltage products
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Multiple vulnerabilities in Dell Container Storage Modules
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS/DWA
• Multiple vulnerabilities in macOS Ventura
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• openEuler update for curl
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Amazon Linux AMI update for curl
• Multiple vulnerabilities in Dell ObjectScale
• Fedora 37 update for curl
• Fedora 35 update for curl
• Fedora 36 update for curl
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Meinberg LANTIME firmware update for third-party components (January 2023)