CVE-2022-42915

🗓️ 29 Oct 2022 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 301 Views

curl before 7.86.0 double free via non-HTTP(S) URL CONNECT request to prox

Reporter	Title	Published	Views	Family All 118
FreeBSD	curl -- multiple vulnerabilities	26 Oct 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to denial of service and remote attack due to OpenSSL and cURL libcurl. (CVE-2022-4304, CVE-2023-0215, CVE-2023-0286 & CVE-2022-42915).	18 Apr 202319:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libcURL affect IBM Rational ClearCase ( CVE-2022-42915, CVE-2022-42916, CVE-2022-32221, CVE-2022-35252, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207 )	31 Jan 202314:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	14 Mar 202316:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect agent is vulnerable to using components with know vulnerabilities	5 Dec 202219:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to cURL libcurl and Google protobuf-java. (CVE-2022-42915, CVE-2021-22569, CVE-2022-3509, CVE-2022-3171, CVE-2022-3510)	30 Jun 202309:26	–	ibm
IBM Security Bulletins	Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by multiple vulnerabilities in libcurl (CVE-2022-42915, CVE-2022-42916, CVE-2022-32221)	17 Nov 202208:48	–	ibm
Tenable Nessus	Amazon Linux 2022 : curl (ALAS2022-2022-246)	9 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2023-083)	21 Mar 202300:00	–	nessus

NVD

Node

haxx curlRange7.77.0–7.86.0

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp ontap_9Match-

Node

apple macosRange12.0.0–12.6.3

apple macosRange13.0–13.2

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/
curl	www.curl.se/docs/CVE-2022-42915.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/
seclists	www.seclists.org/fulldisclosure/2023/Jan/19
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/
support	www.support.apple.com/kb/HT213605
support	www.support.apple.com/kb/HT213604
seclists	www.seclists.org/fulldisclosure/2023/Jan/20
security	www.security.gentoo.org/glsa/202212-01
security	www.security.netapp.com/advisory/ntap-20221209-0010/

07 May 2025 14:15Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.1

EPSS0.00467

SSVC

CWE-415