Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.

🗓️ 10 Feb 2023 08:00:00Reported by MicrosoftType 
mscve
 mscve🔗 msrc.microsoft.com👁 119 Views

Open Source Curl Remote Code Execution Vulnerabilit

Related
Detection
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: libcurl as used by IBM QRadar Wincollect agent is vulnerable to denial of service (CVE-2022-43552, CVE-2022-43551)
25 Jan 202319:11
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Kubernetes, curl and systemd
19 Jun 202308:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC
15 Jun 202317:06
–ibm
IBM Security Bulletins		Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions
20 Feb 202503:40
–ibm
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to Use After Free in RHEL (CVE-2022-43552 )
18 Jan 202421:00
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Axios, Node.js, VMWare tools, and Linux Kernel might affect IBM Storage Defender – Data Protect.
9 Feb 202415:50
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management
28 Jul 202315:32
–ibm
IBM Security Bulletins		Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8
18 Oct 202407:56
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus
23 Mar 202320:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments
16 May 202322:43
–ibm
Rows per page
Vulners
Node
OR
microsoftazl3_tensorflow_2.11.1-1Range<2.16.1-1
microsoftazl3_cmake_3.28.2-1Range<3.28.2-1
microsoftazl3_tensorflow_2.16.1-1Range<2.16.1-1
microsoftcbl2_cmake_3.21.4-13Range<3.21.4-13
microsoftcbl2_curl_7.86.0-3Range<7.86.0-3
microsoftcbl2_mysql_8.0.33-1Range<8.0.33-1
microsoftcbl2_rust_1.72.0-2Range<1.72.0-2
microsoftcm1_cmake_3.21.4-3Range<3.21.4-3
microsoftcm1_curl_7.86.0-3Range<7.86.0-3
microsoftcm1_mysql_8.0.32-1Range<8.0.32-1
microsoftcm1_rust_1.59.0-1Range<1.59.0-1
microsoftazl3_cmake_3.21.4-10Range<3.28.2-1
microsoftcmake_3.28.2_6.azl3Range<3.28.2-6
microsoftpython3_tensorflow_2.16.1_5.azl3Range<2.16.1-5
microsoftcmake_3.28.2_6.azl3Range<3.28.2-6
microsoftcurl_debuginfo_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_libs_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_devel_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_debuginfo_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_libs_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_devel_7.86.0_3.cm1Range<7.86.0-3
microsoftcurl_7.86.0_3.cm1Range<7.86.0-3
microsoftrust_debuginfo_1.72.0_2.cm2Range<1.72.0-2
microsoftrust_doc_1.72.0_2.cm2Range<1.72.0-2
microsoftrust_1.72.0_2.cm2Range<1.72.0-2
microsoftmysql_debuginfo_8.0.33_1.cm2Range<8.0.33-1
microsoftmysql_devel_8.0.33_1.cm2Range<8.0.33-1
microsoftmysql_8.0.33_1.cm2Range<8.0.33-1
microsoftcurl_debuginfo_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_libs_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_devel_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_7.86.0_3.cm2Range<7.86.0-3
microsoftcmake_3.21.4_13.cm2Range<3.21.4-13
microsoftrust_debuginfo_1.72.0_2.cm2Range<1.72.0-2
microsoftrust_doc_1.72.0_2.cm2Range<1.72.0-2
microsoftrust_1.72.0_2.cm2Range<1.72.0-2
microsoftmysql_debuginfo_8.0.33_1.cm2Range<8.0.33-1
microsoftmysql_devel_8.0.33_1.cm2Range<8.0.33-1
microsoftmysql_8.0.33_1.cm2Range<8.0.33-1
microsoftcurl_debuginfo_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_libs_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_devel_7.86.0_3.cm2Range<7.86.0-3
microsoftcurl_7.86.0_3.cm2Range<7.86.0-3
microsoftcmake_3.21.4_13.cm2Range<3.21.4-13
microsoftazure_iot_edge_for_linuxRange<3.28.2-1arm
microsoftazure_iot_edge_for_linuxRange<2.16.1-1arm
microsoftazure_iot_edge_for_linuxRange<3.28.2-1x64
microsoftazure_iot_edge_for_linuxRange<2.16.1-1x64
microsoftcbl_marinerRange<7.86.0-3arm
microsoftcbl_marinerRange<7.86.0-3x64
microsoftcbl_marinerRange<3.21.4-13arm
microsoftcbl_marinerRange<7.86.0-3arm
microsoftcbl_marinerRange<8.0.33-1arm
microsoftcbl_marinerRange<1.72.0-2arm
microsoftcbl_marinerRange<3.21.4-13x64
microsoftcbl_marinerRange<7.86.0-3x64
microsoftcbl_marinerRange<8.0.33-1x64
microsoftcbl_marinerRange<1.72.0-2x64
microsoftwindows_10_22h2Range<10.0.19045.2846x86
microsoftwindows_10_22h2Range<10.0.19045.2846x64
microsoftwindows_10_22h2Range<10.0.19045.2846x64
microsoftwindows_11_22h2Range<10.0.22621.1555x64
microsoftwindows_11_22h2Range<10.0.22621.1555x64
microsoftwindows_10_21h2Range<10.0.19044.2846x64
microsoftwindows_10_21h2Range<10.0.19044.2846x64
microsoftwindows_10_21h2Range<10.0.19044.2846x86
microsoftwindows_11_21h2Range<10.0.22000.1817x64
microsoftwindows_11_21h2Range<10.0.22000.1817x64
microsoftwindows_10_20h2Range<10.0.19042.2846x64
microsoftwindows_10_20h2Range<10.0.19042.2846x86
microsoftwindows_server_2022Range<10.0.20348.1668
microsoftwindows_server_2022Range<10.0.20348.1668
microsoftwindows_server_2019Range<10.0.17763.4252
microsoftwindows_server_2019Range<10.0.17763.4252
microsoftwindows_10_1809Range<10.0.17763.4252x64
microsoftwindows_10_1809Range<10.0.17763.4252x64
microsoftwindows_10_1809Range<10.0.17763.4252x86

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
18 Feb 2026 09:04Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.15.9
EPSS0.02511
SSVC
open sourcecurlremote code executionvulnerabilitymicrosoft
119