Lucene search

K
f5F5F5:K000133092
HistoryMar 21, 2023 - 12:00 a.m.

K000133092: cURL vulnerability CVE-2022-43552

2023-03-2100:00:00
my.f5.com
11
curl
vulnerability
cve-2022-43552
use after free
http proxy
smb
telnet
memory
terminate

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

Security Advisory Description

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path. (CVE-2022-43552)

Impact

Referencing memory after it has been freed can cause a program to terminate, use unexpected values, or execute code.

Affected configurations

Vulners
Node
f5big\-ip_nextMatch1.5.0
OR
f5big\-ip_nextMatch1.6.0
OR
f5big\-ip_nextMatch1.7.0
OR
f5big\-ipMatch13.1.0
OR
f5big\-ipMatch13.1.1
OR
f5big\-ipMatch13.1.3
OR
f5big\-ipMatch13.1.4
OR
f5big\-ipMatch13.1.5
OR
f5big\-ipMatch14.1.0
OR
f5big\-ipMatch14.1.2
OR
f5big\-ipMatch14.1.3
OR
f5big\-ipMatch14.1.4
OR
f5big\-ipMatch14.1.5
OR
f5big\-ipMatch15.1.0
OR
f5big\-ipMatch15.1.1
OR
f5big\-ipMatch15.1.2
OR
f5big\-ipMatch15.1.3
OR
f5big\-ipMatch15.1.4
OR
f5big\-ipMatch15.1.5
OR
f5big\-ipMatch15.1.6
OR
f5big\-ipMatch15.1.7
OR
f5big\-ipMatch15.1.8
OR
f5big\-ip_afmMatch13.1.0
OR
f5big\-ip_afmMatch13.1.1
OR
f5big\-ip_afmMatch13.1.3
OR
f5big\-ip_afmMatch13.1.4
OR
f5big\-ip_afmMatch13.1.5
OR
f5big\-ip_afmMatch14.1.0
OR
f5big\-ip_afmMatch14.1.2
OR
f5big\-ip_afmMatch14.1.3
OR
f5big\-ip_afmMatch14.1.4
OR
f5big\-ip_afmMatch14.1.5
OR
f5big\-ip_afmMatch15.1.0
OR
f5big\-ip_afmMatch15.1.1
OR
f5big\-ip_afmMatch15.1.2
OR
f5big\-ip_afmMatch15.1.3
OR
f5big\-ip_afmMatch15.1.4
OR
f5big\-ip_afmMatch15.1.5
OR
f5big\-ip_afmMatch15.1.6
OR
f5big\-ip_afmMatch15.1.7
OR
f5big\-ip_afmMatch15.1.8
OR
f5big\-ip_afmMatch16.1.0
OR
f5big\-ip_afmMatch16.1.1
OR
f5big\-ip_afmMatch16.1.2
OR
f5big\-ip_afmMatch16.1.3
OR
f5big\-ip_afmMatch17.0.0
OR
f5big\-ip_afmMatch17.1.0
OR
f5big\-ip_analyticsMatch13.1.0
OR
f5big\-ip_analyticsMatch13.1.1
OR
f5big\-ip_analyticsMatch13.1.3
OR
f5big\-ip_analyticsMatch13.1.4
OR
f5big\-ip_analyticsMatch13.1.5
OR
f5big\-ip_analyticsMatch14.1.0
OR
f5big\-ip_analyticsMatch14.1.2
OR
f5big\-ip_analyticsMatch14.1.3
OR
f5big\-ip_analyticsMatch14.1.4
OR
f5big\-ip_analyticsMatch14.1.5
OR
f5big\-ip_analyticsMatch15.1.0
OR
f5big\-ip_analyticsMatch15.1.1
OR
f5big\-ip_analyticsMatch15.1.2
OR
f5big\-ip_analyticsMatch15.1.3
OR
f5big\-ip_analyticsMatch15.1.4
OR
f5big\-ip_analyticsMatch15.1.5
OR
f5big\-ip_analyticsMatch15.1.6
OR
f5big\-ip_analyticsMatch15.1.7
OR
f5big\-ip_analyticsMatch15.1.8
OR
f5big\-ip_analyticsMatch16.1.0
OR
f5big\-ip_analyticsMatch16.1.1
OR
f5big\-ip_analyticsMatch16.1.2
OR
f5big\-ip_analyticsMatch16.1.3
OR
f5big\-ip_analyticsMatch17.0.0
OR
f5big\-ip_analyticsMatch17.1.0
OR
f5big\-ip_apmMatch13.1.0
OR
f5big\-ip_apmMatch13.1.1
OR
f5big\-ip_apmMatch13.1.3
OR
f5big\-ip_apmMatch13.1.4
OR
f5big\-ip_apmMatch13.1.5
OR
f5big\-ip_apmMatch14.1.0
OR
f5big\-ip_apmMatch14.1.2
OR
f5big\-ip_apmMatch14.1.3
OR
f5big\-ip_apmMatch14.1.4
OR
f5big\-ip_apmMatch14.1.5
OR
f5big\-ip_apmMatch15.1.0
OR
f5big\-ip_apmMatch15.1.1
OR
f5big\-ip_apmMatch15.1.2
OR
f5big\-ip_apmMatch15.1.3
OR
f5big\-ip_apmMatch15.1.4
OR
f5big\-ip_apmMatch15.1.5
OR
f5big\-ip_apmMatch15.1.6
OR
f5big\-ip_apmMatch15.1.7
OR
f5big\-ip_apmMatch15.1.8
OR
f5big\-ip_apmMatch16.1.0
OR
f5big\-ip_apmMatch16.1.1
OR
f5big\-ip_apmMatch16.1.2
OR
f5big\-ip_apmMatch16.1.3
OR
f5big\-ip_apmMatch17.0.0
OR
f5big\-ip_apmMatch17.1.0
OR
f5big\-ip_asmMatch13.1.0
OR
f5big\-ip_asmMatch13.1.1
OR
f5big\-ip_asmMatch13.1.3
OR
f5big\-ip_asmMatch13.1.4
OR
f5big\-ip_asmMatch13.1.5
OR
f5big\-ip_asmMatch14.1.0
OR
f5big\-ip_asmMatch14.1.2
OR
f5big\-ip_asmMatch14.1.3
OR
f5big\-ip_asmMatch14.1.4
OR
f5big\-ip_asmMatch14.1.5
OR
f5big\-ip_asmMatch15.1.0
OR
f5big\-ip_asmMatch15.1.1
OR
f5big\-ip_asmMatch15.1.2
OR
f5big\-ip_asmMatch15.1.3
OR
f5big\-ip_asmMatch15.1.4
OR
f5big\-ip_asmMatch15.1.5
OR
f5big\-ip_asmMatch15.1.6
OR
f5big\-ip_asmMatch15.1.7
OR
f5big\-ip_asmMatch15.1.8
OR
f5big\-ip_asmMatch16.1.0
OR
f5big\-ip_asmMatch16.1.1
OR
f5big\-ip_asmMatch16.1.2
OR
f5big\-ip_asmMatch16.1.3
OR
f5big\-ip_asmMatch17.0.0
OR
f5big\-ip_asmMatch17.1.0
OR
f5big\-ip_dnsMatch13.1.0
OR
f5big\-ip_dnsMatch13.1.1
OR
f5big\-ip_dnsMatch13.1.3
OR
f5big\-ip_dnsMatch13.1.4
OR
f5big\-ip_dnsMatch13.1.5
OR
f5big\-ip_dnsMatch14.1.0
OR
f5big\-ip_dnsMatch14.1.2
OR
f5big\-ip_dnsMatch14.1.3
OR
f5big\-ip_dnsMatch14.1.4
OR
f5big\-ip_dnsMatch14.1.5
OR
f5big\-ip_dnsMatch15.1.0
OR
f5big\-ip_dnsMatch15.1.1
OR
f5big\-ip_dnsMatch15.1.2
OR
f5big\-ip_dnsMatch15.1.3
OR
f5big\-ip_dnsMatch15.1.4
OR
f5big\-ip_dnsMatch15.1.5
OR
f5big\-ip_dnsMatch15.1.6
OR
f5big\-ip_dnsMatch15.1.7
OR
f5big\-ip_dnsMatch15.1.8
OR
f5big\-ip_dnsMatch16.1.0
OR
f5big\-ip_dnsMatch16.1.1
OR
f5big\-ip_dnsMatch16.1.2
OR
f5big\-ip_dnsMatch16.1.3
OR
f5big\-ip_dnsMatch17.0.0
OR
f5big\-ip_dnsMatch17.1.0
OR
f5big\-ipMatch13.1.0
OR
f5big\-ipMatch13.1.1
OR
f5big\-ipMatch13.1.3
OR
f5big\-ipMatch13.1.4
OR
f5big\-ipMatch13.1.5
OR
f5big\-ipMatch14.1.0
OR
f5big\-ipMatch14.1.2
OR
f5big\-ipMatch14.1.3
OR
f5big\-ipMatch14.1.4
OR
f5big\-ipMatch14.1.5
OR
f5big\-ipMatch15.1.0
OR
f5big\-ipMatch15.1.1
OR
f5big\-ipMatch15.1.2
OR
f5big\-ipMatch15.1.3
OR
f5big\-ipMatch15.1.4
OR
f5big\-ipMatch15.1.5
OR
f5big\-ipMatch15.1.6
OR
f5big\-ipMatch15.1.7
OR
f5big\-ipMatch15.1.8
OR
f5big\-ipMatch16.1.0
OR
f5big\-ipMatch16.1.1
OR
f5big\-ipMatch16.1.2
OR
f5big\-ipMatch16.1.3
OR
f5big\-ipMatch17.0.0
OR
f5big\-ipMatch17.1.0
OR
f5big\-ip_link_controllerMatch13.1.0
OR
f5big\-ip_link_controllerMatch13.1.1
OR
f5big\-ip_link_controllerMatch13.1.3
OR
f5big\-ip_link_controllerMatch13.1.4
OR
f5big\-ip_link_controllerMatch13.1.5
OR
f5big\-ip_link_controllerMatch14.1.0
OR
f5big\-ip_link_controllerMatch14.1.2
OR
f5big\-ip_link_controllerMatch14.1.3
OR
f5big\-ip_link_controllerMatch14.1.4
OR
f5big\-ip_link_controllerMatch14.1.5
OR
f5big\-ip_link_controllerMatch15.1.0
OR
f5big\-ip_link_controllerMatch15.1.1
OR
f5big\-ip_link_controllerMatch15.1.2
OR
f5big\-ip_link_controllerMatch15.1.3
OR
f5big\-ip_link_controllerMatch15.1.4
OR
f5big\-ip_link_controllerMatch15.1.5
OR
f5big\-ip_link_controllerMatch15.1.6
OR
f5big\-ip_link_controllerMatch15.1.7
OR
f5big\-ip_link_controllerMatch15.1.8
OR
f5big\-ip_link_controllerMatch16.1.0
OR
f5big\-ip_link_controllerMatch16.1.1
OR
f5big\-ip_link_controllerMatch16.1.2
OR
f5big\-ip_link_controllerMatch16.1.3
OR
f5big\-ip_link_controllerMatch17.0.0
OR
f5big\-ip_link_controllerMatch17.1.0
OR
f5big\-ip_ltmMatch13.1.0
OR
f5big\-ip_ltmMatch13.1.1
OR
f5big\-ip_ltmMatch13.1.3
OR
f5big\-ip_ltmMatch13.1.4
OR
f5big\-ip_ltmMatch13.1.5
OR
f5big\-ip_ltmMatch14.1.0
OR
f5big\-ip_ltmMatch14.1.2
OR
f5big\-ip_ltmMatch14.1.3
OR
f5big\-ip_ltmMatch14.1.4
OR
f5big\-ip_ltmMatch14.1.5
OR
f5big\-ip_ltmMatch15.1.0
OR
f5big\-ip_ltmMatch15.1.1
OR
f5big\-ip_ltmMatch15.1.2
OR
f5big\-ip_ltmMatch15.1.3
OR
f5big\-ip_ltmMatch15.1.4
OR
f5big\-ip_ltmMatch15.1.5
OR
f5big\-ip_ltmMatch15.1.6
OR
f5big\-ip_ltmMatch15.1.7
OR
f5big\-ip_ltmMatch15.1.8
OR
f5big\-ip_ltmMatch16.1.0
OR
f5big\-ip_ltmMatch16.1.1
OR
f5big\-ip_ltmMatch16.1.2
OR
f5big\-ip_ltmMatch16.1.3
OR
f5big\-ip_ltmMatch17.0.0
OR
f5big\-ip_ltmMatch17.1.0
OR
f5big\-ip_pemMatch13.1.0
OR
f5big\-ip_pemMatch13.1.1
OR
f5big\-ip_pemMatch13.1.3
OR
f5big\-ip_pemMatch13.1.4
OR
f5big\-ip_pemMatch13.1.5
OR
f5big\-ip_pemMatch14.1.0
OR
f5big\-ip_pemMatch14.1.2
OR
f5big\-ip_pemMatch14.1.3
OR
f5big\-ip_pemMatch14.1.4
OR
f5big\-ip_pemMatch14.1.5
OR
f5big\-ip_pemMatch15.1.0
OR
f5big\-ip_pemMatch15.1.1
OR
f5big\-ip_pemMatch15.1.2
OR
f5big\-ip_pemMatch15.1.3
OR
f5big\-ip_pemMatch15.1.4
OR
f5big\-ip_pemMatch15.1.5
OR
f5big\-ip_pemMatch15.1.6
OR
f5big\-ip_pemMatch15.1.7
OR
f5big\-ip_pemMatch15.1.8
OR
f5big\-ip_pemMatch16.1.0
OR
f5big\-ip_pemMatch16.1.1
OR
f5big\-ip_pemMatch16.1.2
OR
f5big\-ip_pemMatch16.1.3
OR
f5big\-ip_pemMatch17.0.0
OR
f5big\-ip_pemMatch17.1.0
OR
f5nginx_api_connectivity_managerMatch1.0.0
OR
f5nginx_api_connectivity_managerMatch1.1.0
OR
f5nginx_api_connectivity_managerMatch1.1.1
OR
f5nginx_api_connectivity_managerMatch1.2.0
OR
f5nginx_api_connectivity_managerMatch1.3.0
OR
f5nginx_api_connectivity_managerMatch1.3.1
OR
f5nginx_api_connectivity_managerMatch1.4.0
OR
f5nginx_api_connectivity_managerMatch1.4.1
OR
f5nginx_app_protectMatch1.0.0
OR
f5nginx_app_protectMatch2.0.0
OR
f5nginx_app_protectMatch2.1.0
OR
f5nginx_app_protectMatch2.2.0
OR
f5nginx_app_protectMatch2.3.0
OR
f5nginx_app_protectMatch2.4.0
OR
f5nginx_app_protectMatch3.0.0
OR
f5nginx_app_protectMatch3.1.0
OR
f5nginx_app_protectMatch4.0.1
OR
f5nginx_app_protectMatch3.0.0
OR
f5nginx_app_protectMatch3.1.0
OR
f5nginx_app_protectMatch3.10.0
OR
f5nginx_app_protectMatch3.11.0
OR
f5nginx_app_protectMatch3.12.1
OR
f5nginx_app_protectMatch3.12.2
OR
f5nginx_app_protectMatch3.2.0
OR
f5nginx_app_protectMatch3.3.0
OR
f5nginx_app_protectMatch3.4.0
OR
f5nginx_app_protectMatch3.5.0
OR
f5nginx_app_protectMatch3.6.0
OR
f5nginx_app_protectMatch3.7.0
OR
f5nginx_app_protectMatch3.8.0
OR
f5nginx_app_protectMatch3.9.0
OR
f5nginx_app_protectMatch3.9.1
OR
f5nginx_app_protectMatch4.0.0
OR
f5nginx_app_protectMatch4.1.0
OR
f5nginx_controllerMatch3.15.0
OR
f5nginx_controllerMatch3.16.1
OR
f5nginx_controllerMatch3.17.0
OR
f5nginx_controllerMatch3.18.0
OR
f5nginx_controllerMatch3.18.0-APIM
OR
f5nginx_controllerMatch3.18.1
OR
f5nginx_controllerMatch3.18.1-APIM
OR
f5nginx_controllerMatch3.18.2
OR
f5nginx_controllerMatch3.18.3
OR
f5nginx_controllerMatch3.19.0-APIM
OR
f5nginx_controllerMatch3.19.1-APIM
OR
f5nginx_controllerMatch3.19.2-APIM
OR
f5nginx_controllerMatch3.19.3-APIM
OR
f5nginx_controllerMatch3.19.4-APIM
OR
f5nginx_controllerMatch3.19.5-APIM
OR
f5nginx_controllerMatch3.20.0
OR
f5nginx_controllerMatch3.20.1
OR
f5nginx_controllerMatch3.21.0
OR
f5nginx_controllerMatch3.22.0
OR
f5nginx_controllerMatch3.22.1
OR
f5nginx_controllerMatch3.22.2
OR
f5nginx_controllerMatch3.22.3
OR
f5nginx_controllerMatch3.22.4
OR
f5nginx_controllerMatch3.22.5
OR
f5nginx_controllerMatch3.22.6
OR
f5nginx_controllerMatch3.22.7
OR
f5nginx_controllerMatch3.22.8
OR
f5nginx_ingress_controllerMatch1.10.1
OR
f5nginx_ingress_controllerMatch1.11.0
OR
f5nginx_ingress_controllerMatch1.11.1
OR
f5nginx_ingress_controllerMatch1.11.2
OR
f5nginx_ingress_controllerMatch1.12.0
OR
f5nginx_ingress_controllerMatch1.12.1
OR
f5nginx_ingress_controllerMatch1.12.2
OR
f5nginx_ingress_controllerMatch1.12.3
OR
f5nginx_ingress_controllerMatch1.12.4
OR
f5nginx_ingress_controllerMatch1.12.5
OR
f5nginx_ingress_controllerMatch2.0.0
OR
f5nginx_ingress_controllerMatch2.0.1
OR
f5nginx_ingress_controllerMatch2.0.2
OR
f5nginx_ingress_controllerMatch2.0.3
OR
f5nginx_ingress_controllerMatch2.1.0
OR
f5nginx_ingress_controllerMatch2.1.1
OR
f5nginx_ingress_controllerMatch2.1.2
OR
f5nginx_ingress_controllerMatch2.2.0
OR
f5nginx_ingress_controllerMatch2.2.1
OR
f5nginx_ingress_controllerMatch2.2.2
OR
f5nginx_ingress_controllerMatch2.3.0
OR
f5nginx_ingress_controllerMatch2.4.0
OR
f5nginx_ingress_controllerMatch2.4.1
OR
f5nginx_ingress_controllerMatch2.4.2
OR
f5nginx_ingress_controllerMatch3.0.0
OR
f5nginx_ingress_controllerMatch3.0.1
OR
f5nginx_ingress_controllerMatch3.0.2
OR
f5nginx_instance_managerMatch1.0.0
OR
f5nginx_instance_managerMatch1.0.1
OR
f5nginx_instance_managerMatch1.0.2
OR
f5nginx_instance_managerMatch1.0.3
OR
f5nginx_instance_managerMatch1.0.4
OR
f5nginx_instance_managerMatch2.0.0
OR
f5nginx_instance_managerMatch2.0.1
OR
f5nginx_instance_managerMatch2.1.0
OR
f5nginx_instance_managerMatch2.2.0
OR
f5nginx_instance_managerMatch2.3.0
OR
f5nginx_instance_managerMatch2.3.1
OR
f5nginx_instance_managerMatch2.4.0
OR
f5nginx_instance_managerMatch2.5.0
OR
f5nginx_instance_managerMatch2.5.1
OR
f5nginx_instance_managerMatch2.6.0
OR
f5nginx_instance_managerMatch2.7.0
OR
f5nginx_instance_managerMatch2.8.0
OR
f5nginx_security_monitoringMatch1.0.0
OR
f5nginx_security_monitoringMatch1.1.0
OR
f5nginx_security_monitoringMatch1.2.0
OR
f5nginx_plusMatchR23
OR
f5nginx_plusMatchR24
OR
f5nginx_plusMatchR25
OR
f5nginx_plusMatchR26
OR
f5nginx_plusMatchR27
OR
f5nginx_plusMatchR28
OR
f5nginx_service_meshMatch1.1.0
OR
f5nginx_service_meshMatch1.2.0
OR
f5nginx_service_meshMatch1.2.1
OR
f5nginx_service_meshMatch1.3.0
OR
f5nginx_service_meshMatch1.3.1
OR
f5nginx_service_meshMatch1.4.0
OR
f5nginx_service_meshMatch1.4.1
OR
f5nginx_service_meshMatch1.5.0
OR
f5nginx_service_meshMatch1.6.0
OR
f5nginx_service_meshMatch1.7.0
OR
f5nginxMatch1.22.0
OR
f5nginxMatch1.23.0
OR
f5nginxMatch1.24.0
OR
f5nginxMatch1.25.0
OR
f5nginxMatch1.26.0
OR
f5nginxMatch1.26.1
OR
f5nginxMatch1.27.0
OR
f5nginxMatch1.28.0
OR
f5nginxMatch1.29.0
OR
f5f5os\-aMatch1.3.0
OR
f5f5os\-aMatch1.3.1
OR
f5f5os\-aMatch1.3.2
OR
f5f5os\-aMatch1.4.0
OR
f5f5os\-cMatch1.3.0
OR
f5f5os\-cMatch1.3.1
OR
f5f5os\-cMatch1.3.2
OR
f5f5os\-cMatch1.5.0
OR
f5f5os\-cMatch1.5.1
OR
f5big\-iq_centralized_managementMatch7.1.0
OR
f5big\-iq_centralized_managementMatch8.0.0
OR
f5big\-iq_centralized_managementMatch8.1.0
OR
f5big\-iq_centralized_managementMatch8.2.0
OR
f5big\-ip_ddos_hybrid_defenderMatch14.1.0
OR
f5big\-ip_ddos_hybrid_defenderMatch14.1.2
OR
f5big\-ip_ddos_hybrid_defenderMatch15.1.0
OR
f5big\-ip_ddos_hybrid_defenderMatch15.1.1
OR
f5big\-ip_ddos_hybrid_defenderMatch16.1.0
OR
f5big\-ip_ddos_hybrid_defenderMatch17.0.0
OR
f5big\-ip_ddos_hybrid_defenderMatch17.1.0
OR
f5ssl_orchestratorMatch14.1.0
OR
f5ssl_orchestratorMatch14.1.2
OR
f5ssl_orchestratorMatch14.1.4
OR
f5ssl_orchestratorMatch15.1.0
OR
f5ssl_orchestratorMatch15.1.1
OR
f5ssl_orchestratorMatch16.1.0
OR
f5ssl_orchestratorMatch16.1.1
OR
f5ssl_orchestratorMatch16.1.3
OR
f5ssl_orchestratorMatch17.0.0
OR
f5ssl_orchestratorMatch17.1.0
OR
f5traffix_signaling_delivery_controllerMatch5.1.0
OR
f5traffix_signaling_delivery_controllerMatch5.2.0