CVE-2022-27776: Medium severity haxx curl vulnerability
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Other sources
When asked to send custom headers or cookies in its HTTP requests, curl sends that set of headers only to the host which name is used in the initial URL, so that redirects to other hosts will make curl send the data to those. However, due to a flawed check, curl wrongly also sends that same set of headers to the hosts that are identical to the first one but use a different port number or URL scheme. Contrary to expectation and intention. Sending the same set of headers to a server on a different port number is a problem for applications that pass on custom Authorization: or Cookie: headers, as those headers often contain privacy sensitive information or data.
curl and libcurl have options that allow users to opt out from this check, but that is not set by default.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.88.1-10+deb12u15Fixed in 7.88.1-10+deb12u5Fixed in 8.14.1-2+deb13u5Fixed in 8.14.1-2+deb13u7Fixed in 8.22.0-1Fixed in 8.23.0-1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.79.1-r1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.80.0-r1 - Upgrade
Upgrade
alpine/curlto a version that resolves this vulnerability.Fixed in 7.83.0-r0 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.83.0-1 - Upgrade
Upgrade
redhat/curlto a version that resolves this vulnerability.Fixed in 7.83.0 - Upgrade
Upgrade
curlto a version that resolves this vulnerability.Fixed in 7.83.0
Event History
Frequently Asked Questions
What is CVE-2022-27776?
CVE-2022-27776 refers to an insufficiently protected credentials vulnerability in curl 7.83.0.
What is the severity of CVE-2022-27776?
The severity of CVE-2022-27776 is high (6.5).
How does CVE-2022-27776 impact users?
CVE-2022-27776 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
Which software versions are affected by CVE-2022-27776?
The vulnerable software versions include curl 7.64.0-4+deb10u7, 7.74.0-1.3+deb11u9, 7.74.0-1.3+deb11u10, 7.88.1-10+deb12u3, 7.88.1-10+deb12u4, and 8.4.0-2.
Where can I find more information about CVE-2022-27776?
You can find more information about CVE-2022-27776 at the following references: [link1], [link2], [link3].