CVE-2023-27536 Auth bypass in https://github.com/curl/curl
Attackers can bypass authentication in libcurl by exploiting connection reuse flaws in GSSAPI transfers, potentially accessing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-27536?
CVE-2023-27536 is a medium-severity authentication bypass vulnerability in Debian Debian Linux, published on 30 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
Which versions are affected by CVE-2023-27536?
It affects 10 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Haxx Libcurl, Netapp Active Iq Unified Manager, Netapp H300s Firmware, Netapp H410s Firmware and 4 more.
How do I fix CVE-2023-27536?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-27536 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-27536 exists.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2023-27536, AZL-25785, AZL-25802, AZL-25809, AZL-25845, AZL-34606 and 7 more.