CVE-2022-27781 Denial of service in https://github.com/curl/curl
A malicious server can cause libcurl built with NSS to enter an infinite loop when retrieving certificate information, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-27781?
CVE-2022-27781 is a high-severity denial of service vulnerability in Debian Debian Linux, published on 1 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
Which versions are affected by CVE-2022-27781?
It affects 12 products.
Products include Debian Debian Linux, Haxx Curl, Netapp Clustered Data Ontap, Netapp H300s Firmware, Netapp H410s Firmware, Netapp H500s Firmware and 6 more.
How do I fix CVE-2022-27781?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-27781 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-27781 exists.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2022-27781, AZL-9890, CLEANSTART-2026-OZ32877, CLSA-2022-1656430897, CURL-CVE-2022-27781, DEBIAN-CVE-2022-27781 and 4 more.