Description
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- curl / curlab650379a8c25ca952f651476d25b4cdd77bb3fc – 3da249e1f0716c06644ed3522a37a8bf81808012
- curl / curl8.19.0 – 8.19.0
- curl / curl8.18.0 – 8.18.0
- curl / curl8.17.0 – 8.17.0
- curl / curl8.16.0 – 8.16.0
- curl / curl8.15.0 – 8.15.0
- curl / curl8.20.0 – 8.20.0
- curl / curl8.15.0 – 8.16.1
- curl / curl8.17.0 – 8.20.1
- haxx / curl8.15.0 – 8.21.0
Updated 44m ago · 8 sources