Moderate Vulnerability in curl Package: Proxy Credential Disclosure and Information Leakage
Summary
RLSA-2026:80512: Moderate: curl security update. Affects curl versions < 0:8.12.1-4.el10_2.7. Fixed in 0:8.12.1-4.el10_2.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The curl package provides the libcurl library and the curl utility, which are essential for downloading files from servers using various protocols such as HTTP, FTP, and LDAP. It is widely used in various applications and systems for its robust functionality and ease of use. However, recent vulnerabilities have been identified that could compromise user credentials and lead to information disclosure.
Vulnerability Detail
The vulnerabilities in the curl package stem from improper handling of proxy credentials and connection reuse. Specifically, there are issues with credential disclosure via unauthenticated proxies, authentication bypass due to incorrect HTTP Negotiate connection reuse, and information leakage through reused Proxy-Authorization headers. These vulnerabilities can lead to unauthorized access to sensitive information and potential denial of service due to a use-after-free condition.
How To Fix
Minimum fixed version
0:8.12.1-4.el10_2.7
This is the first release that contains the fix.
sudo dnf update curlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider avoiding the use of proxy servers or ensure that your proxy configurations do not allow unauthenticated access. Additionally, review your application’s handling of HTTP redirects and proxy connections to mitigate potential risks.
Conclusion
In summary, the curl package has several vulnerabilities that can lead to credential disclosure and information leakage. It is crucial to update to the latest patched version to mitigate these risks. Users should also consider workarounds until they can apply the necessary updates.
See every vulnerability recorded for curl →
FAQ
The CVSS score of this vulnerability is 6.5, indicating a moderate level of risk.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The potential consequences include unauthorized access to sensitive information, credential leaks, and denial of service attacks.
Yes, the vulnerabilities are addressed in the patched version 0:8.12.1-4.el10_2.7 or later.
If you cannot update immediately, consider implementing workarounds such as avoiding proxy usage or reviewing your proxy configurations.
References
Related vulnerabilities
Recent vulnerabilities recorded for curl.
