A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

🗓️ 03 Apr 2023 07:00:00Reported by MicrosoftType

Double free in libcurl before 8.0.0 allows two threads sharing hsts data to free twice due to missing mutexes.

Reporter	Title	Published	Views	Family All 88
FreeBSD	curl -- multiple vulnerabilities	20 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX	29 Jun 202316:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway, Configuration Utility, VPN, Certificate and Base Module affected by multiple vulnerabilities	6 Jun 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Samba, Golang, Curl, and openssl can affect IBM Spectrum Protect Plus	8 Nov 202318:36	–	ibm
ATTACKERKB	CVE-2023-27537	30 Mar 202320:15	–	attackerkb