Description
A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using `alarm()` and `siglongjmp()`. When doing this, libcurl used a global buffer that was not mutex protected and a multi-threaded application might therefore crash or otherwise misbehave.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
References
- MISChttps://hackerone.com/reports/1929597
- MISChttps://security.netapp.com/advisory/ntap-20230609-0009/
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213843
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213844
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213845
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/52
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/48
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/47
- MISChttps://security.gentoo.org/glsa/202310-12
Updated 15m ago · 8 sources