Heap-buffer-overflow in Curl_headers_push in curl
Summary
OSV-2022-450: Heap-buffer-overflow in Curl_headers_push. Affects curl versions >= 4d94fac9f0d1dd02b8308291e4c47651142dc28b, < f810047f9d7a983c4479ae07f79282b7c9b54ccb. Fixed in f810047f9d7a983c4479ae07f79282b7c9b54ccb. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Curl is a widely used open-source library and command-line tool for transferring data with URLs. It supports various protocols and is known for its versatility and robustness. However, a vulnerability has been discovered in the Curl_headers_push function, which can lead to a heap-buffer-overflow write. This vulnerability affects the curl package.
Vulnerability Detail
The vulnerability arises from a heap-buffer-overflow write in the Curl_headers_push function. This can be triggered when processing headers during HTTP communication. An attacker could exploit this vulnerability to overwrite adjacent memory, potentially leading to arbitrary code execution or a denial-of-service condition. The vulnerability has been assigned a severity rating of HIGH.
How To Fix
Minimum fixed version
f810047f9d7a983c4479ae07f79282b7c9b54ccb
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there is no known workaround for this vulnerability. It is advised to update the curl package to a fixed version as soon as possible.
Conclusion
In conclusion, the curl package is vulnerable to a heap-buffer-overflow write in the Curl_headers_push function. This can be exploited by an attacker to execute arbitrary code or cause a denial-of-service. To mitigate this vulnerability, it is crucial to update the curl package to a version that includes the fix. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for curl →
FAQ
Curl is an open-source library and command-line tool for transferring data with URLs. It supports various protocols and is widely used in software development.
A heap-buffer-overflow is a type of memory vulnerability where a program writes data beyond the bounds of a heap-allocated buffer. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service.
An attacker can exploit this vulnerability by crafting malicious HTTP headers that trigger the heap-buffer-overflow write. By overwriting adjacent memory, the attacker may be able to execute arbitrary code or cause the application to crash.
This vulnerability has been assigned a severity rating of HIGH due to its potential for arbitrary code execution or denial-of-service.
Yes, a fix for this vulnerability has been implemented in commit f810047f9d7a983c4479ae07f79282b7c9b54ccb. It is recommended to update the curl package to a version that includes this fix.
References
Related vulnerabilities
Recent vulnerabilities recorded for curl.
