CVE-2022-27774: Medium severity haxx curl vulnerability
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
Other sources
curl follows HTTP(S) redirects when asked to. curl also supports authentication. When a user and password are provided for a URL with a given hostname, curl makes an effort to not pass on those credentials to other hosts in redirects unless given permission with a special option.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.88.1-10+deb12u15Fixed in 7.88.1-10+deb12u5Fixed in 8.14.1-2+deb13u5Fixed in 8.14.1-2+deb13u7Fixed in 8.22.0-1Fixed in 8.23.0-1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.79.1-r1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.80.0-r1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.83.0-r0 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.83.0-1 - Upgrade
Upgrade
redhat/curlto a version that resolves this vulnerability.Fixed in 7.83.0
Event History
Frequently Asked Questions
What is CVE-2022-27774?
CVE-2022-27774 is an insufficiently protected credentials vulnerability in curl 4.9 to 7.82.0 that could allow an attacker to extract credentials when HTTP(S) redirects are used with authentication.
Which software versions are affected by CVE-2022-27774?
curl versions 4.9 to 7.82.0 are affected by CVE-2022-27774.
What is the severity of CVE-2022-27774?
CVE-2022-27774 has a severity rating of 5.7, which is classified as high.
How can an attacker exploit CVE-2022-27774?
An attacker can exploit CVE-2022-27774 by leveraging HTTP(S) redirects with authentication to extract credentials.
Are there any remedies or patches available for CVE-2022-27774?
Yes, the recommended remedy versions for CVE-2022-27774 are: curl 7.64.0-4+deb10u7, curl 7.74.0-1.3+deb11u9, curl 7.74.0-1.3+deb11u10, curl 7.88.1-10+deb12u3, curl 7.88.1-10+deb12u4, and curl 8.4.0-2.