The vulnerability of the fopen() function in the libcurl library, related to state management errors, allows attackers to create or overwrite protected files.

🗓️ 01 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

fopen() vulnerability in libcurl involves state errors enabling protected file creation.

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	22 Nov 202315:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed libcurl vulnerabilities affect IBM Safer Payments	11 Dec 202315:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
CBLMariner	CVE-2023-32001 affecting package rust for versions less than 1.72.0-2	11 Oct 202301:41	–	cbl_mariner
CBLMariner	CVE-2023-32001 affecting package curl for versions less than 8.2.1-1	18 Aug 202320:45	–	cbl_mariner
CBLMariner	CVE-2023-32001 affecting package tensorflow for versions less than 2.16.1-1	17 Apr 202422:02	–	cbl_mariner
Cloud Foundry	USN-6237-2: curl regression \| Cloud Foundry	10 Aug 202300:00	–	cloudfoundry
Cloud Foundry	USN-6237-1: curl vulnerabilities \| Cloud Foundry	18 Mar 202400:00	–	cloudfoundry
Chainguard	CVE-2023-32001 vulnerabilities	26 Jul 202321:15	–	cgr
Circl	CVE-2023-32001	25 Jul 202307:52	–	circl

Vulners

Node

daniel_stenberg libcurlRange7.84.0–8.1.2

OR

fedora fedoraMatch37

Source	Link
hackerone	www.hackerone.com/reports/2039870
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-32001
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BGJ7POX4ATGERTSBFJPW2EQH4Z65PSZJ/
github	www.github.com/curl/curl/commit/0c667188e0c6cda615a036b8a2b4125f2c404dde
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

20 Oct 2023 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 35.5

CVSS 26.5

fopen vulnerability libcurl library state errors protected files remote attacker