Description
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- Debian / debian_linux10.0 – 10.0
- fedoraproject / fedora36 – 36
- haxx / libcurl7.22.0 – 7.88.1
- NetApp / active_iq_unified_manager
- NetApp / h300s_firmware
- NetApp / h410s_firmware
- NetApp / h500s_firmware
- NetApp / h700s_firmware
- NetApp / ontap9 – 9
- Splunk / Universal Forwarder8.2.0 – 8.2.12
- Splunk / Universal Forwarder9.1.0 – 9.1.0
References
- MISChttps://hackerone.com/reports/1895135
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
- MISChttps://security.netapp.com/advisory/ntap-20230420-0010/
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
- MISChttps://security.gentoo.org/glsa/202310-12
Updated 20m ago · 8 sources