The vulnerability of the libcurl library lies in the absence of mutexes or flow locks, allowing attackers to exploit memory after it is freed.

🗓️ 17 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Libcurl vulnerability from missing mutexes and locks enables use-after-free and data reuse in remote attacks.

Reporter	Title	Published	Views	Family All 87
FreeBSD	curl -- multiple vulnerabilities	20 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX	29 Jun 202316:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway, Configuration Utility, VPN, Certificate and Base Module affected by multiple vulnerabilities	6 Jun 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Samba, Golang, Curl, and openssl can affect IBM Spectrum Protect Plus	8 Nov 202318:36	–	ibm
ATTACKERKB	CVE-2023-27537	30 Mar 202320:15	–	attackerkb

Vulners

Node

daniel_stenberg curlRange7.88.0–7.88.1

Source	Link
curl	www.curl.se/docs/CVE-2023-27537.html
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
suse	www.suse.com/security/cve/CVE-2023-27537.html
hackerone	www.hackerone.com/reports/1897203
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

20 Oct 2023 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.1

CVSS 35.6

EPSS0.01856

libcurl missing mutexes flow locks use after free remote attacker data reuse combined attacks