CVE-2023-28322
Description
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
How to fix
- haxx curl8.1.0 or later
- apple macos11.7.9, 12.6.8, 13.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx curl | v < 8.1.0 | 8.1.0 |
| fedoraproject fedora | 37, 38 | — |
| apple macos | 11.0 ≤ v < 11.7.9, 12.0 ≤ v < 12.6.8, 13.0 ≤ v < 13.5 | 11.7.9, 12.6.8, 13.5 |
| netapp clustered_data_ontap | No range specified | — |
| netapp ontap_antivirus_connector | No range specified | — |
| netapp h300s_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.