Use-after-free in cURL - CVE-2022-43552

Vulnerability identifier: #VU70456

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-43552

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error while processing denied requests from HTTP proxies when using SMB or TELNET protocols. A remote attacker can trigger a use-after-free error and crash the application.

cURL
IBM Qradar SIEM
Gentoo Linux
Debian Linux
PowerSC
Amazon Linux AMI
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Anolis OS
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
CentOS
Red Hat Enterprise Linux Desktop
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Oracle Solaris
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
macOS
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Fedora
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
cflinuxfs3
Telemetry Dashboard
Liquidware
IBM Engineering Requirements Management DOORS Next
Citrix Workspace App
Webex App VDI
ObjectScale
Storage Defender – Data Protect
IBM Cloud Pak for Watson AIOps
Platform Automation Toolkit
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Watson Studio on Cloud Pak for Data
Storage Ceph
IBM supplied MQ Advanced container images
EMC Cloud Tiering Appliance
Dell PowerProtect Cyber Recovery
VMware Tanzu Application Service for VMs
Isolation Segment
VMware Tanzu RabbitMQ for VMs
Data Lakehouse
Service Telemetry Framework
Migration Toolkit for Virtualization
IBM MQ Operator
IBM Spectrum Copy Data Management
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
Session Smart Router
IBM Safer Payments
IBM Security Verify Governance
IBM QRadar WinCollect Agent
IBM Spectrum Protect Plus
IBM Robotic Process Automation
Self Node Remediation Operator
VMware Tanzu Operations Manager
JBoss Core Services
LANTIME Operating System Firmware (LTOS)
Juniper Secure Analytics (JSA)
Splunk Enterprise
Splunk Universal Forwarder
Cisco Jabber
Cisco Webex Meetings
VMware Horizon Client
Dell EMC Container Storage Modules
libcurl3-gnutls (Ubuntu package)
curl (Ubuntu package)
libcurl3-nss (Ubuntu package)
libcurl3 (Ubuntu package)
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libcurl-devel
curl
libcurl
curl (Red Hat package)
libcurl4 (Ubuntu package)
curl-debuginfo
libcurl4
libcurl4-debuginfo-32bit
libcurl4-32bit
libcurl4-debuginfo
curl-debugsource
libcurl4-32bit-debuginfo
libcurl-devel-32bit
curl-help
curl (Debian package)
jbcs-httpd24-curl (Red Hat package)
net-misc/curl
SINEC NMS
Red Hat OpenShift GitOps
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
RecoverPoint for VMs
RSA Authentication Manager

Install updates from vendor's website.

cURL - update to 7.87.0
VMware Tanzu Application Service for VMs - addressed in versions 2.11.33, 2.12.22, 2.13.15, 3.0.7
Isolation Segment - addressed in versions 2.11.27, 2.12.17, 2.13.12, 3.0.7
cflinuxfs3 - update to 0.348.0
Self Node Remediation Operator - update to 0.5.1
Data Lakehouse - update to 1.1.0.0
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Virtualization - update to 2.4.3
JBoss Core Services - update to 2.4.51 SP2
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
LANTIME Operating System Firmware (LTOS) - update to 7.06.012
Juniper Secure Analytics (JSA) - update to 7.5.0 UP7 IF05
Splunk Universal Forwarder - addressed in versions 8.1.14, 8.2.11, 9.0.5
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.8
macOS - update to 13.3 22E252
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
libcurl3-gnutls (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2
curl (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2
libcurl3-nss (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2
libcurl3 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-33.el7jbcs, 0.4.10-33.el8jbcs
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-18.el7jbcs, 1.0.0-18.el8jbcs
SINEC NMS - update to 1.0.3.1
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.18-2.el7jbcs, 1.3.18-2.el8jbcs
ObjectScale - update to 1.4.0
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs
Dell EMC Container Storage Modules - update to 1.7.0
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-23.el7jbcs, 1.15.19-23.el8jbcs
Storage Defender – Data Protect - update to 2.0.1
IBM MQ Operator - addressed in versions 2.0.12, 2.4.0
IBM Spectrum Copy Data Management - update to 2.2.20.1
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.0-20.el7jbcs, 2.4.0-20.el8jbcs
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-24.el7jbcs, 2.9.3-24.el8jbcs
VMware Tanzu Operations Manager - addressed in versions 2.10.55, 3.0.4
IBM Cloud Transformation Advisor - update to 3.10.0
IBM Cloud Pak for Watson AIOps - update to 4.2.0
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
DB2 on Cloud Pak for Data - update to 4.8.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.4
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
Watson Studio on Cloud Pak for Data - update to 5.0.3
Dell Secure Connect Gateway - update to 5.14.00.16
RecoverPoint for VMs - update to 6.0.SP1.P1
Storage Ceph - update to 6.1
Session Smart Router - addressed in versions 6.2.10, 6.3.7
IBM Safer Payments - addressed in versions 6.4.2.03, 6.5.0.01
IBM Qradar SIEM - update to 7.5.0 Update Pack 7 IF05
libcurl-devel - update to 7.29.0-59
curl - update to 7.29.0-59
libcurl - update to 7.29.0-59
curl (Red Hat package) - addressed in versions 7.29.0-59.el7_9.2, 7.61.1-30.el8, 7.76.1-23.el9
libcurl4 (Ubuntu package) - addressed in versions 7.58.0-2ubuntu3.22, 7.68.0-1ubuntu2.15, 7.81.0-1ubuntu1.7, 7.85.0-1ubuntu0.2
curl-debuginfo - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
curl - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
libcurl4 - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
libcurl4-debuginfo-32bit - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1
libcurl4-32bit - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
libcurl4-debuginfo - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
curl-debugsource - addressed in versions 7.60.0-4.56.1, 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
libcurl-devel - addressed in versions 7.60.0-11.52.1, 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
libcurl4-32bit-debuginfo - addressed in versions 7.60.0-150000.51.1, 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
curl - addressed in versions 7.61.1-12.104, 7.87.0-2
libcurl-devel-32bit - addressed in versions 7.66.0-150200.4.45.1, 7.79.1-150400.5.12.1
curl-debuginfo - addressed in versions 7.71.1-20, 7.79.1-13
libcurl-devel - addressed in versions 7.71.1-20, 7.79.1-13
curl - addressed in versions 7.71.1-20, 7.79.1-13
curl-debugsource - addressed in versions 7.71.1-20, 7.79.1-13
libcurl - addressed in versions 7.71.1-20, 7.79.1-13
curl-help - addressed in versions 7.71.1-20, 7.79.1-13
curl (Debian package) - update to 7.74.0-1.3+deb11u5
curl - addressed in versions 7.82.0-12.fc36, 7.85.0-5.fc37
jbcs-httpd24-curl (Red Hat package) - addressed in versions 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs
net-misc/curl - update to 8.3.0-r2
RSA Authentication Manager - update to 8.7 Patch 3
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.5-r3, 9.3.3.0-r1
IBM Security Verify Governance - update to 10.0.2.0.2
IBM QRadar WinCollect Agent - update to 10.1.2
IBM Spectrum Protect Plus - update to 10.1.15
EMC Cloud Tiering Appliance - update to 13.1.0.2.33
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
IBM Robotic Process Automation - addressed in versions 21.0.7.8, 23.0.9

• https://curl.haxx.se/docs/CVE-2022-43552.html

• Multiple vulnerabilities in cURL
• SUSE update for curl
• SUSE update for curl
• SUSE update for curl
• Multiple vulnerabilities in cflinuxfs3
• Ubuntu update for curl
• Multiple vulnerabilities in IBM QRadar WinCollect Agent
• Debian update for curl
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Ubuntu update for curl
• Multiple vulnerabilities in macOS Ventura
• Amazon Linux AMI update for curl
• IBM Safer Payments update for cURL
• Red Hat Enterprise Linux 9 update for curl
• Multiple vulnerabilities in Siemens SINEC NMS
• Red Hat Enterprise Linux 8 update for curl
• VMware Tanzu products update for curl
• SUSE update for curl
• SUSE update for curl
• Multiple vulnerabilities in Oracle Linux
• VMware Tanzu products update for curl
• Splunk Universal Forwarder update for third-party packages
• Red Hat JBoss Core Services update for Apache HTTP Server
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in IBM PowerSC
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in Oracle Solaris third-party software
• IBM AIX update for cURL
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Gentoo update for curl
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Red Hat Enterprise Linux 7 update for curl
• CentOS 7 update for curl
• Use-after-free in IBM Storage Ceph
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Storage Defender - Data Protect
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS/DWA
• openEuler 20.03 LTS SP1 update for curl
• openEuler 20.03 LTS SP3 update for curl
• openEuler 22.03 LTS update for curl
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Amazon Linux AMI update for curl
• Multiple vulnerabilities in Dell ObjectScale
• Fedora 36 update for curl
• Fedora 37 update for curl
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Anolis OS update for curl
• RSA Authentication Manager update for third-party components
• Multiple vulnerabilities in Meinberg LANTIME firmware
• Juniper Session Smart Router update for third-party components