Denial of Service in libcurl due to Erroneous Function
Summary
CVE-2022-27781: libcurl provides the CURLOPT_CERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get... Affects curl across 2 version ranges.
< 7.79.1-r2
< 462196e6b4a47f924293a0e26b8e9c23d37ac26f
Fixed in 7.79.1-r2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libcurl package is a widely used open-source library that provides client-side URL transfers. It supports various protocols, including HTTP, HTTPS, FTP, and more. libcurl is utilized by numerous applications to perform network operations and handle data transfers. However, a vulnerability has been discovered in libcurl that can lead to a Denial of Service (DoS) condition.
Vulnerability Detail
The vulnerability, identified as CVE-2022-27781, arises from an erroneous function in libcurl. The library offers the CURLOPT_CERTINFO option, allowing applications to request details about a server's certificate chain. However, due to the flaw, a malicious server can exploit this option to cause libcurl, built with NSS (Network Security Services), to enter an infinite busy-loop when attempting to retrieve the certificate information. This can result in the application becoming unresponsive and consuming excessive system resources.
How To Fix
Minimum fixed version
7.79.1-r2
This is the first release that contains the fix.
sudo apk add --upgrade curlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix mentioned above by updating the curl package to the appropriate version.
Conclusion
In conclusion, the vulnerability in libcurl (CVE-2022-27781) can result in a Denial of Service (DoS) condition due to an erroneous function. It is crucial to update the affected curl package to the recommended versions for the respective Alpine Linux versions. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for curl →
FAQ
libcurl is an open-source library that enables client-side URL transfers and supports various protocols like HTTP, HTTPS, FTP, and more.
CURLOPT_CERTINFO is an option provided by libcurl that allows applications to request details about a server's certificate chain.
The vulnerability can lead to a Denial of Service (DoS) condition, causing the affected application to become unresponsive and consume excessive system resources.
The vulnerability affects curl versions prior to 7.79.1-r2 for Alpine Linux v3.13 and v3.14, and versions prior to 7.80.0-r2 for Alpine Linux v3.15. It has been fixed in version 7.83.1-r0 for Alpine Linux v3.16, v3.17, and v3.18.
To mitigate this vulnerability, it is recommended to update the curl package to the fixed version mentioned above for the respective Alpine Linux version.
Related vulnerabilities
Recent vulnerabilities recorded for curl.
