CVE-2022-27781

CVE-2022-27781

Name

CVE-2022-27781

Description

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
MISC	https://hackerone.com/reports/1555441
CONFIRM	https://security.netapp.com/advisory/ntap-20220609-0009/
Mailing List	https://www.debian.org/security/2022/dsa-5197
Mailing List	https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
Third Party Advisory	https://security.gentoo.org/glsa/202212-01

Type

URI

MISC

https://hackerone.com/reports/1555441

CONFIRM

https://security.netapp.com/advisory/ntap-20220609-0009/

Mailing List

https://www.debian.org/security/2022/dsa-5197

Mailing List

https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html

Third Party Advisory

https://security.gentoo.org/glsa/202212-01

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:haxx:curl::::::::`	curl	>= None	< 7.83.1

CPE URI

Source package

Min version

Max version

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

curl

>= None

< 7.83.1

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
curl	edge-main	7.83.1-r0	None	fixed
curl	edge-main	7.83.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.79.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.78.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.77.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.76.0-r0	None	possibly vulnerable
curl	edge-main	7.74.0-r0	None	possibly vulnerable
curl	edge-main	7.72.0-r0	None	possibly vulnerable
curl	edge-main	7.71.0-r0	None	possibly vulnerable
curl	edge-main	7.66.0-r0	None	possibly vulnerable
curl	edge-main	7.65.0-r0	None	possibly vulnerable
curl	edge-main	7.64.0-r0	None	possibly vulnerable
curl	edge-main	7.62.0-r0	None	possibly vulnerable
curl	edge-main	7.61.1-r0	None	possibly vulnerable
curl	edge-main	7.61.0-r0	None	possibly vulnerable
curl	edge-main	7.60.0-r0	None	possibly vulnerable
curl	edge-main	7.59.0-r0	None	possibly vulnerable
curl	edge-main	7.57.0-r0	None	possibly vulnerable
curl	edge-main	7.56.1-r0	None	possibly vulnerable
curl	edge-main	7.55.0-r0	None	possibly vulnerable
curl	edge-main	7.54.0-r0	None	possibly vulnerable
curl	edge-main	7.53.1-r2	None	possibly vulnerable
curl	edge-main	7.53.0-r0	None	possibly vulnerable
curl	edge-main	7.52.1-r0	None	possibly vulnerable
curl	edge-main	7.51.0-r0	None	possibly vulnerable
curl	edge-main	7.50.3-r0	None	possibly vulnerable
curl	edge-main	7.50.2-r0	None	possibly vulnerable
curl	edge-main	7.50.1-r0	None	possibly vulnerable
curl	edge-main	7.36.0-r0	None	possibly vulnerable
curl	3.22-main	7.83.1-r0	None	fixed
curl	3.22-main	7.83.0-r0	None	possibly vulnerable
curl	3.22-main	7.79.0-r0	None	possibly vulnerable
curl	3.22-main	7.78.0-r0	None	possibly vulnerable
curl	3.22-main	7.77.0-r0	None	possibly vulnerable
curl	3.22-main	7.76.0-r0	None	possibly vulnerable
curl	3.22-main	7.74.0-r0	None	possibly vulnerable
curl	3.22-main	7.72.0-r0	None	possibly vulnerable
curl	3.22-main	7.71.0-r0	None	possibly vulnerable
curl	3.22-main	7.66.0-r0	None	possibly vulnerable
curl	3.22-main	7.65.0-r0	None	possibly vulnerable
curl	3.22-main	7.64.0-r0	None	possibly vulnerable
curl	3.22-main	7.62.0-r0	None	possibly vulnerable
curl	3.22-main	7.61.1-r0	None	possibly vulnerable
curl	3.22-main	7.61.0-r0	None	possibly vulnerable
curl	3.22-main	7.60.0-r0	None	possibly vulnerable
curl	3.22-main	7.59.0-r0	None	possibly vulnerable
curl	3.22-main	7.57.0-r0	None	possibly vulnerable
curl	3.22-main	7.56.1-r0	None	possibly vulnerable
curl	3.22-main	7.55.0-r0	None	possibly vulnerable
curl	3.22-main	7.54.0-r0	None	possibly vulnerable
curl	3.22-main	7.53.1-r2	None	possibly vulnerable
curl	3.22-main	7.53.0-r0	None	possibly vulnerable
curl	3.22-main	7.52.1-r0	None	possibly vulnerable
curl	3.22-main	7.51.0-r0	None	possibly vulnerable
curl	3.22-main	7.50.3-r0	None	possibly vulnerable
curl	3.22-main	7.50.2-r0	None	possibly vulnerable
curl	3.22-main	7.50.1-r0	None	possibly vulnerable
curl	3.22-main	7.36.0-r0	None	possibly vulnerable
curl	3.21-main	7.83.1-r0	None	fixed
curl	3.21-main	7.83.0-r0	None	possibly vulnerable
curl	3.21-main	7.79.0-r0	None	possibly vulnerable
curl	3.21-main	7.78.0-r0	None	possibly vulnerable
curl	3.21-main	7.77.0-r0	None	possibly vulnerable
curl	3.21-main	7.76.0-r0	None	possibly vulnerable
curl	3.21-main	7.74.0-r0	None	possibly vulnerable
curl	3.21-main	7.72.0-r0	None	possibly vulnerable
curl	3.21-main	7.71.0-r0	None	possibly vulnerable
curl	3.21-main	7.66.0-r0	None	possibly vulnerable
curl	3.21-main	7.65.0-r0	None	possibly vulnerable
curl	3.21-main	7.64.0-r0	None	possibly vulnerable
curl	3.21-main	7.62.0-r0	None	possibly vulnerable
curl	3.21-main	7.61.1-r0	None	possibly vulnerable
curl	3.21-main	7.61.0-r0	None	possibly vulnerable
curl	3.21-main	7.60.0-r0	None	possibly vulnerable
curl	3.21-main	7.59.0-r0	None	possibly vulnerable
curl	3.21-main	7.57.0-r0	None	possibly vulnerable
curl	3.21-main	7.56.1-r0	None	possibly vulnerable
curl	3.21-main	7.55.0-r0	None	possibly vulnerable
curl	3.21-main	7.54.0-r0	None	possibly vulnerable
curl	3.21-main	7.53.1-r2	None	possibly vulnerable
curl	3.21-main	7.53.0-r0	None	possibly vulnerable
curl	3.21-main	7.52.1-r0	None	possibly vulnerable
curl	3.21-main	7.51.0-r0	None	possibly vulnerable
curl	3.21-main	7.50.3-r0	None	possibly vulnerable
curl	3.21-main	7.50.2-r0	None	possibly vulnerable
curl	3.21-main	7.50.1-r0	None	possibly vulnerable
curl	3.21-main	7.36.0-r0	None	possibly vulnerable
curl	3.20-main	7.83.1-r0	None	fixed
curl	3.20-main	7.83.0-r0	None	possibly vulnerable
curl	3.20-main	7.79.0-r0	None	possibly vulnerable
curl	3.20-main	7.78.0-r0	None	possibly vulnerable
curl	3.20-main	7.77.0-r0	None	possibly vulnerable
curl	3.20-main	7.76.0-r0	None	possibly vulnerable
curl	3.20-main	7.74.0-r0	None	possibly vulnerable
curl	3.20-main	7.72.0-r0	None	possibly vulnerable
curl	3.20-main	7.71.0-r0	None	possibly vulnerable
curl	3.20-main	7.66.0-r0	None	possibly vulnerable
curl	3.20-main	7.65.0-r0	None	possibly vulnerable
curl	3.20-main	7.64.0-r0	None	possibly vulnerable
curl	3.20-main	7.62.0-r0	None	possibly vulnerable
curl	3.20-main	7.61.1-r0	None	possibly vulnerable
curl	3.20-main	7.61.0-r0	None	possibly vulnerable
curl	3.20-main	7.60.0-r0	None	possibly vulnerable
curl	3.20-main	7.59.0-r0	None	possibly vulnerable
curl	3.20-main	7.57.0-r0	None	possibly vulnerable
curl	3.20-main	7.56.1-r0	None	possibly vulnerable
curl	3.20-main	7.55.0-r0	None	possibly vulnerable
curl	3.20-main	7.54.0-r0	None	possibly vulnerable
curl	3.20-main	7.53.1-r2	None	possibly vulnerable
curl	3.20-main	7.53.0-r0	None	possibly vulnerable
curl	3.20-main	7.52.1-r0	None	possibly vulnerable
curl	3.20-main	7.51.0-r0	None	possibly vulnerable
curl	3.20-main	7.50.3-r0	None	possibly vulnerable
curl	3.20-main	7.50.2-r0	None	possibly vulnerable
curl	3.20-main	7.50.1-r0	None	possibly vulnerable
curl	3.20-main	7.36.0-r0	None	possibly vulnerable
curl	3.19-main	7.83.1-r0	None	fixed
curl	3.19-main	7.83.0-r0	None	possibly vulnerable
curl	3.19-main	7.79.0-r0	None	possibly vulnerable
curl	3.19-main	7.78.0-r0	None	possibly vulnerable
curl	3.19-main	7.77.0-r0	None	possibly vulnerable
curl	3.19-main	7.76.0-r0	None	possibly vulnerable
curl	3.19-main	7.74.0-r0	None	possibly vulnerable
curl	3.19-main	7.72.0-r0	None	possibly vulnerable
curl	3.19-main	7.71.0-r0	None	possibly vulnerable
curl	3.19-main	7.66.0-r0	None	possibly vulnerable
curl	3.19-main	7.65.0-r0	None	possibly vulnerable
curl	3.19-main	7.64.0-r0	None	possibly vulnerable
curl	3.19-main	7.62.0-r0	None	possibly vulnerable
curl	3.19-main	7.61.1-r0	None	possibly vulnerable
curl	3.19-main	7.61.0-r0	None	possibly vulnerable
curl	3.19-main	7.60.0-r0	None	possibly vulnerable
curl	3.19-main	7.59.0-r0	None	possibly vulnerable
curl	3.19-main	7.57.0-r0	None	possibly vulnerable
curl	3.19-main	7.56.1-r0	None	possibly vulnerable
curl	3.19-main	7.55.0-r0	None	possibly vulnerable
curl	3.19-main	7.54.0-r0	None	possibly vulnerable
curl	3.19-main	7.53.1-r2	None	possibly vulnerable
curl	3.19-main	7.53.0-r0	None	possibly vulnerable
curl	3.19-main	7.52.1-r0	None	possibly vulnerable
curl	3.19-main	7.51.0-r0	None	possibly vulnerable
curl	3.19-main	7.50.3-r0	None	possibly vulnerable
curl	3.19-main	7.50.2-r0	None	possibly vulnerable
curl	3.19-main	7.50.1-r0	None	possibly vulnerable
curl	3.19-main	7.36.0-r0	None	possibly vulnerable
curl	3.18-main	7.83.1-r0	None	fixed
curl	3.17-main	7.83.1-r0	None	fixed

Source package

Branch

Version

Maintainer

Status

References

Match rules

Vulnerable and fixed packages