CVE-2022-43552 Use after free in https://github.com/curl/curl

Q: Is CVE-2022-43552 being exploited?

There is no known exploitation of CVE-2022-43552 in the wild and no public exploit code.

Medium 5.9 Published 9 Feb 2023 Updated 14 Oct 2026

A use-after-free flaw in curl allows attackers to cause crashes or potentially execute code when tunneling SMB or TELNET through a proxy.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2022-43552?

CVE-2022-43552 is a medium-severity use after free vulnerability in Apple Macos, published on 9 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

Weakness: CWE-416

Which versions are affected by CVE-2022-43552?

It affects 3 products.

Linux distribution packages (22)

`curl` Red Hat:enterprise_linux:7::client	All versions	`0:7.29.0-59.el7_9.2`
`curl-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:7.29.0-59.el7_9.2`
`libcurl` Red Hat:enterprise_linux:7::client	All versions	`0:7.29.0-59.el7_9.2`
`libcurl-devel` Red Hat:enterprise_linux:7::client	All versions	`0:7.29.0-59.el7_9.2`
`curl-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:7.29.0-59.el7_9.2`
`libcurl-devel` Red Hat:enterprise_linux:7::computenode	All versions	`0:7.29.0-59.el7_9.2`
`curl` Red Hat:enterprise_linux:7::server	All versions	`0:7.29.0-59.el7_9.2`
`curl-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:7.29.0-59.el7_9.2`
`libcurl` Red Hat:enterprise_linux:7::server	All versions	`0:7.29.0-59.el7_9.2`
`libcurl-devel` Red Hat:enterprise_linux:7::server	All versions	`0:7.29.0-59.el7_9.2`
`curl` Red Hat:enterprise_linux:7::workstation	All versions	`0:7.29.0-59.el7_9.2`
`curl-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:7.29.0-59.el7_9.2`
`libcurl` Red Hat:enterprise_linux:7::workstation	All versions	`0:7.29.0-59.el7_9.2`
`libcurl-devel` Red Hat:enterprise_linux:7::workstation	All versions	`0:7.29.0-59.el7_9.2`
`curl` SUSE:Linux Enterprise Micro 5.1	All versions	`7.66.0-150200.4.45.1`
`curl` SUSE:Linux Enterprise Micro 5.2	All versions	`7.66.0-150200.4.45.1`
`curl` SUSE:Linux Enterprise Real Time 15 SP3	All versions	`7.66.0-150200.4.45.1`
`curl` SUSE:Linux Enterprise Server 12 SP5	All versions	`7.60.0-11.52.1`
`curl` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	All versions	`7.60.0-11.52.1`
`curl` SUSE:Linux Enterprise Software Development Kit 12 SP5	All versions	`7.60.0-11.52.1`
`curl` openSUSE:Leap 15.3	All versions	`7.66.0-150200.4.45.1`
`curl` openSUSE:Leap Micro 5.2	All versions	`7.66.0-150200.4.45.1`

Products include Apple Macos, Haxx Curl, Splunk Universal Forwarder.

How do I fix CVE-2022-43552?

Upgrade to a fixed version.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2022-43552 being exploited?

There is no known exploitation of CVE-2022-43552 in the wild and no public exploit code.

All Apple Macos vulnerabilities

Sources

Also known as ALPINE-CVE-2022-43552, AZL-13280, AZL-13284, AZL-13287, AZL-13289, AZL-34604 and 13 more.