CVE-2022-27782 Security feature bypass in https://github.com/curl/curl
libcurl incorrectly reuses connections despite changed TLS or SSH settings, potentially bypassing security configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-27782?
CVE-2022-27782 is a high-severity vulnerability in Debian Debian Linux, published on 1 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.
Which versions are affected by CVE-2022-27782?
It affects 3 products.
Products include Debian Debian Linux, Haxx Curl, Splunk Universal Forwarder.
How do I fix CVE-2022-27782?
Upgrade to a fixed version.
Is CVE-2022-27782 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-27782 exists.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2022-27782, AZL-9877, CLEANSTART-2026-QZ34422, CLSA-2022-1656959369, CLSA-2022-1656961578, CLSA-2022-1656961923 and 6 more.