CVE-2024-7264 ASN.1 date parser overread
An attacker can trigger a heap overread in libcurl's ASN.1 parser, potentially leaking heap memory or causing a crash via malformed time fields.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-7264?
CVE-2024-7264 is a medium-severity vulnerability in Haxx Libcurl, published on 31 Jul 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.
This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
Weakness: CWE-125
Which versions are affected by CVE-2024-7264?
It affects 1 product.
Linux distribution packages (20)
curl SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Installer Updates 15 SP4 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Installer Updates 15 SP5 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Micro 5.1 | All versions | 7.66.0-150200.4.75.1 |
curl SUSE:Linux Enterprise Micro 5.2 | All versions | 7.66.0-150200.4.75.1 |
curl SUSE:Linux Enterprise Micro 5.3 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Micro 5.4 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Micro 5.5 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Server 12 SP5 | All versions | 8.0.1-11.89.1 |
curl SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 8.0.1-11.89.1 |
curl SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 8.0.1-11.89.1 |
curl SUSE:Manager Proxy 4.3 | All versions | 8.0.1-150400.5.47.1 |
curl SUSE:Manager Server 4.3 | All versions | 8.0.1-150400.5.47.1 |
curl openSUSE:Leap 15.5 | All versions | 8.0.1-150400.5.47.1 |
curl openSUSE:Leap Micro 5.5 | All versions | 8.0.1-150400.5.47.1 |
curl openSUSE:Tumbleweed | All versions | 8.9.1-1.1 |
Products include Haxx Libcurl.
How do I fix CVE-2024-7264?
Upgrade to a fixed version.
Is CVE-2024-7264 being exploited?
There is no known exploitation of CVE-2024-7264 in the wild and no public exploit code.
Other vulnerabilities in Haxx Libcurl
Sources
Also known as ALPINE-CVE-2024-7264, AZL-47253, AZL-47282, BELL-CVE-2024-7264, CLEANSTART-2026-BQ39086, CLSA-2024-1726313254 and 18 more.