CVE-2023-27537: Use After Free
First published: Thu Mar 30 2023(Updated: )
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Engineering Requirements Management DOORS Web Access | <=9.7.2.7 | |
| IBM Rational DOORS Web Access | <=9.7.2.7 | |
| libcurl | =7.88.0 | |
| libcurl | =7.88.1 | |
| NetApp Active IQ Unified Manager for VMware vSphere | ||
| IBM Data ONTAP | =9.0 | |
| Brocade Fabric Operating System | ||
| NetApp H300S Firmware | ||
| NetApp H300S Firmware | ||
| NetApp H500e Firmware | ||
| NetApp H500e Firmware | ||
| NetApp H700S | ||
| NetApp H700S | ||
| NetApp H410S | ||
| NetApp H410S Firmware | ||
| All of | ||
| NetApp H300S Firmware | ||
| NetApp H300S Firmware | ||
| All of | ||
| NetApp H500e Firmware | ||
| NetApp H500e Firmware | ||
| All of | ||
| NetApp H700S | ||
| NetApp H700S | ||
| All of | ||
| NetApp H410S | ||
| NetApp H410S Firmware | ||
| Splunk Universal Forwarder | >=8.2.0<8.2.12 | |
| Splunk Universal Forwarder | >=9.0.0<9.0.6 | |
| Splunk Universal Forwarder | =9.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-27537.
What is the severity rating of CVE-2023-27537?
The severity rating of CVE-2023-27537 is medium.
What is affected by CVE-2023-27537?
Libcurl versions 7.88.0 and 7.88.1 are affected by CVE-2023-27537.
How can I mitigate CVE-2023-27537?
To mitigate CVE-2023-27537, it is recommended to update libcurl to version 8.0.0 or later.
Where can I find more information about CVE-2023-27537?
You can find more information about CVE-2023-27537 in the following references: [HackerOne report](https://hackerone.com/reports/1897203), [Gentoo security advisory](https://security.gentoo.org/glsa/202310-12), [NetApp advisory](https://security.netapp.com/advisory/ntap-20230420-0010/).
- agent/type
- agent/references
- agent/severity
- agent/description
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/author
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/ibm engineering requirements management doors web access
- version/ibm engineering requirements management doors web access/9.7.2.7
- canonical/ibm rational doors web access
- version/ibm rational doors web access/9.7.2.7
- vendor/haxx
- canonical/libcurl
- version/libcurl/7.88.0
- version/libcurl/7.88.1
- vendor/netapp
- canonical/netapp active iq unified manager for vmware vsphere
- canonical/ibm data ontap
- version/ibm data ontap/9.0
- vendor/broadcom
- canonical/brocade fabric operating system
- canonical/netapp h300s firmware
- canonical/netapp h500e firmware
- canonical/netapp h700s
- canonical/netapp h410s
- canonical/netapp h410s firmware
- vendor/splunk
- canonical/splunk universal forwarder
- version/splunk universal forwarder/8.2.0
- version/splunk universal forwarder/9.0.0
- version/splunk universal forwarder/9.1.0