CVE-2023-27537

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-27537
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://hackerone.com/reports/1897203 Exploit Third Party Advisory
https://security.gentoo.org/glsa/202310-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20230420-0010/ Third Party Advisory
https://hackerone.com/reports/1897203 Exploit Third Party Advisory
https://security.gentoo.org/glsa/202310-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20230420-0010/ Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:haxx:libcurl:7.88.0:*:*:*:*:*:*:*
cpe:2.3:a:haxx:libcurl:7.88.1:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*
cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 7 (hide)

OR cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
History

21 Nov 2024, 07:53

Type Values Removed Values Added
References () https://hackerone.com/reports/1897203 - Exploit, Third Party Advisory () https://hackerone.com/reports/1897203 - Exploit, Third Party Advisory
References () https://security.gentoo.org/glsa/202310-12 - Third Party Advisory () https://security.gentoo.org/glsa/202310-12 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20230420-0010/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20230420-0010/ - Third Party Advisory

27 Mar 2024, 14:46

Type Values Removed Values Added
First Time Splunk
Splunk universal Forwarder
CPE cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*
cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
Information

Published : 2023-03-30 20:15

Updated : 2024-11-21 07:53

NVD link : CVE-2023-27537

Mitre link : CVE-2023-27537

CVE.ORG link : CVE-2023-27537

JSON object : View

Products Affected

haxx

  • libcurl

splunk

  • universal_forwarder

netapp

  • h300s
  • active_iq_unified_manager
  • clustered_data_ontap
  • h300s_firmware
  • h410s
  • h410s_firmware
  • h700s
  • h700s_firmware
  • h500s_firmware
  • h500s

broadcom

  • brocade_fabric_operating_system_firmware
CWE
CWE-415

Double Free