CVE-2022-35260

🗓️ 05 Dec 2022 00:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 293 Views

CVE-2022-35260: curl .netrc file parsing flaw can lead to denial-of-servic

Reporter	Title	Published	Views	Family All 86
FreeBSD	curl -- multiple vulnerabilities	26 Oct 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	14 Mar 202316:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect agent is vulnerable to using components with know vulnerabilities	5 Dec 202219:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
ATTACKERKB	CVE-2022-35260	5 Dec 202222:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : curl (ALAS2022-2022-246)	9 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2023-083)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2022-1882)	7 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 36 : curl (2022-01ffde372c)	22 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 35 : curl (2022-39688a779d)	22 Dec 202200:00	–	nessus

NVD

Vulners

Node

haxx curlRange7.84.0–7.86.0

Node

netapp clustered_data_ontapMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

apple macosRange<12.6.3

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "Fixed in 7.86.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Jan/19
security	www.security.netapp.com/advisory/ntap-20230110-0006/
hackerone	www.hackerone.com/reports/1721098
support	www.support.apple.com/kb/HT213605
support	www.support.apple.com/kb/HT213604
seclists	www.seclists.org/fulldisclosure/2023/Jan/20
security	www.security.gentoo.org/glsa/202212-01

21 Nov 2024 07:10Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.5

EPSS0.00285

SSVC