Back to feed
EUVD-2023-32026 · Published May 26, 2023
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
Technologies
Netapp H300SNetapp H500SNetapp H410S FirmwareNetapp H700S FirmwareNetapp H700SNetapp H410SNetapp Ontap Antivirus ConnectorApple MacosHaxx CurlNetapp Clustered Data OntapNetapp H500S FirmwareNetapp H300S Firmware
Weaknesses
CWE-416
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
