Denial of Service Vulnerability in curl
Summary
CVE-2022-35252: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Affects curl across 2 version ranges.
< 7.79.1-r3
< 93d092867f0f2c78571983040ef75e078ee1a4c4
Fixed in 7.79.1-r3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
curl is a command-line tool and library for transferring data with URLs. It supports various protocols, including HTTP and HTTPS. The vulnerability affects versions of curl in the Alpine Linux distributions from v3.13 to v3.18. Curl is widely used in web applications and other software that require data transfer over the internet.
Vulnerability Detail
The vulnerability (CVE-2022-35252) occurs when curl retrieves and parses cookies from an HTTP(S) server. It accepts cookies with control codes that, when sent back to the server, can cause the server to return 400 responses. This allows a 'sister site' to deny service to all siblings. An attacker could exploit this vulnerability to disrupt the functionality of affected applications or websites.
How To Fix
Minimum fixed version
7.79.1-r3
This is the first release that contains the fix.
sudo apk add --upgrade curlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
The vulnerability in curl can be exploited to cause denial of service by sending specially crafted cookies. It is recommended to update the curl package to the latest version to mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for curl →
FAQ
Curl is a command-line tool and library for transferring data with URLs. It supports various protocols, including HTTP and HTTPS.
The vulnerability allows a 'sister site' to deny service to all siblings by causing the server to return 400 responses. This can disrupt the functionality of affected applications or websites.
The vulnerability affects versions of curl in the Alpine Linux distributions from v3.13 to v3.18.
Yes, updating the curl package to version 7.85.0-r0 or later fixes the vulnerability.
There is no known workaround for this vulnerability at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for curl.
