CVE-2022-42915

🗓️ 26 Oct 2022 14:04:53Reported by redhat.comType

A vulnerability in curl when using HTTP proxy for non-HTTP(S) URLs can lead to a double-free issu

Reporter	Title	Published	Views	Family All 91
Cvelist	CVE-2022-42915	29 Oct 202200:00	–	cvelist
Prion	Double free	29 Oct 202220:15	–	prion
AlpineLinux	CVE-2022-42915	29 Oct 202220:15	–	alpinelinux
CBLMariner	CVE-2022-42915 affecting package curl for versions less than 7.86.0-1	16 Nov 202202:26	–	cbl_mariner
CBLMariner	CVE-2022-42915 affecting package curl 7.84.0-1	24 Nov 202200:45	–	cbl_mariner
CBLMariner	CVE-2022-42915 affecting package tensorflow for versions less than 2.16.1-1	17 Apr 202422:02	–	cbl_mariner
NVD	CVE-2022-42915	29 Oct 202220:15	–	nvd
Debian CVE	CVE-2022-42915	29 Oct 202220:15	–	debiancve
Veracode	Double Free	28 Oct 202209:03	–	veracode
Hacker One	curl: CVE-2022-42915: HTTP proxy double-free	4 Oct 202215:34	–	hackerone

Vulners

Node

redhat jbcs-httpd24-curl-0Range≤7.86.0-2.el8jbcs

redhat jbcs-httpd24-curl-0Range≤7.86.0-2.el7jbcs

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42915
curl	www.curl.se/docs/CVE-2022-42915.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Oct 2022 14:53Current

8.9High risk

Vulners AI Score8.9

CVSS37.5

EPSS0.01

CWE-415