CVE Feed

    Dashboard / CVE / CVE-2023-27537

    CVE-2023-27537

    A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

    Published:Mar 20, 2023
    Last Modified:Nov 21, 2024
    EPS:Mar 30, 2023
    EPSS Score:0.00105
    CVSS Score:5.9

    Affected Products

    Vendor
    Broadcom
    Product
    Brocade Fabric Operating System Firmware
    Vendor
    Haxx
    Product
    Libcurl
    Vendor
    Netapp
    Product
    Active Iq Unified Manager
    Vendor
    Netapp
    Product
    Clustered Data Ontap
    Vendor
    Netapp
    Product
    H300s
    Vendor
    Netapp
    Product
    H300s Firmware
    Vendor
    Netapp
    Product
    H410s
    Vendor
    Netapp
    Product
    H410s Firmware
    Vendor
    Netapp
    Product
    H500s
    Vendor
    Netapp
    Product
    H500s Firmware
    Vendor
    Netapp
    Product
    H700s
    Vendor
    Netapp
    Product
    H700s Firmware
    Vendor
    Splunk
    Product
    Universal Forwarder

    Exploits

    https://hackerone.com/reports/1897203https://hackerone.com/reports/1897203

    Common Weakness Enumeration

    CWE-415 Double Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-27538 (CVSS 5.5) — An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously establis…
    CVE-2023-27534 (CVSS 8.8) — A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be …
    CVE-2021-36160 (CVSS 7.5) — A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (D…
    CVE-2021-40438 (CVSS 9) — A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot…
    CVE-2021-34798 (CVSS 7.5) — Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2…
    CVE-2021-4197 (CVSS 7.8) — An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem w…
    CVE-2021-28153 (CVSS 5.3) — An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_…
    CVE-2021-27218 (CVSS 7.5) — An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was c…
    CVE-2021-27219 (CVSS 7.5) — An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an …
    CVE-2021-20197 (CVSS 6.3) — There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and e…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High