Double Free

🗓️ 21 Mar 2023 00:30:25Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 38 Views

Curl software double free vulnerability due to missing mutexes

Reporter	Title	Published	Views	Family All 87
FreeBSD	curl -- multiple vulnerabilities	20 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX	29 Jun 202316:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway, Configuration Utility, VPN, Certificate and Base Module affected by multiple vulnerabilities	6 Jun 202318:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Samba, Golang, Curl, and openssl can affect IBM Spectrum Protect Plus	8 Nov 202318:36	–	ibm
ATTACKERKB	CVE-2023-27537	30 Mar 202320:15	–	attackerkb

Vulners

Node

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.76.0-r0os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.87.0-r3os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch7.84.0-r0os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch7.85.0-r0os

AND

curl curlMatch7.83.1-r1os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch7.84.0-r2os

AND

curl curlMatch7.84.0-r1os

AND

curl curlMatch7.75.0-r0os

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch7.86.0-r1os

AND

curl curlMatch7.87.0-r2os

AND

curl curlMatch7.88.1-r0os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch7.87.0-r0os

AND

alpinelinux alpine_linuxMatch3.17

curl curlMatch7.83.1-r3os

AND

curl curlMatch7.83.1-r1os

AND

curl curlMatch7.83.1-r4os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.83.1-r5os

AND

curl curlMatch7.83.1-r2os

AND

curl curlMatch7.83.1-r6os

AND

alpinelinux alpine_linuxMatch3.16

curl curlMatch7.80.0-r1os

AND

curl curlMatch7.80.0-r2os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.80.0-r5os

AND

curl curlMatch7.80.0-r4os

AND

curl curlMatch7.80.0-r6os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.80.0-r3os

AND

alpinelinux alpine_linuxMatch3.15

curl curlMatch7.79.1-r3os

AND

curl curlMatch7.79.1-r2os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.79.1-r1os

AND

curl curlMatch7.79.1-r5os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.79.1-r4os

AND

curl curlMatch7.77.0-r1os

AND

alpinelinux alpine_linuxMatch3.14

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

libcurl.so libcurl.soMatch4.8.0.debugos

Source	Link
github	www.github.com/curl/curl/commit/dca4cdf071be095bcdc7126eaa77a8946ea4790b
github	www.github.com/curl/curl/pull/10732
hackerone	www.hackerone.com/reports/1897203
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
security	www.security.gentoo.org/glsa/202310-12
security	www.security.netapp.com/advisory/ntap-20230420-0010/

27 Mar 2024 17:09Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.9

EPSS0.00061