CVE-2023-28322 Information disclosure in https://github.com/curl/curl
An attacker can cause information disclosure or memory corruption in applications using libcurl when reusing handles for HTTP transfers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-28322?
CVE-2023-28322 is a medium-severity vulnerability in Apple Macos, published on 26 May 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
Weakness: CWE-200
Which versions are affected by CVE-2023-28322?
It affects 9 products.
Products include Apple Macos, Fedoraproject Fedora, Haxx Curl, Netapp Clustered Data Ontap, Netapp H300s Firmware, Netapp H410s Firmware and 3 more.
How do I fix CVE-2023-28322?
Upgrade to a fixed version.
Is CVE-2023-28322 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-28322 exists.
Other vulnerabilities in Apple Macos
Sources
Also known as ALPINE-CVE-2023-28322, AZL-26791, AZL-26792, AZL-34600, AZL-38070, CLEANSTART-2026-IJ60024 and 6 more.