Уязвимость CVE-2023-38545: Информация

Описание

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with.

Важность: CRITICAL (9,8) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-38545
Опубликовано: 18 октября 2023 г.
Изменено: 1 апреля 2024 г.
Идентификатор типа ошибки: CWE-787

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
MySQLsisyphus8.0.35-alt18.0.36-alt1ALT-PU-2023-7324-2334629Исправлено
MySQLsisyphus_e2k8.0.35-alt1.18.0.36-alt1ALT-PU-2023-7453-1-Исправлено
MySQLp108.0.35-alt1.18.0.36-alt1ALT-PU-2023-7463-2334633Исправлено
MySQLp10_e2k8.0.35-alt1.18.0.36-alt1ALT-PU-2023-7717-1-Исправлено
MySQLc10f18.0.35-alt1.18.0.36-alt1ALT-PU-2023-7888-3335803Исправлено
MySQLc9f28.0.35-alt1.0.c9.18.0.36-alt0.c9.1ALT-PU-2023-7647-3335317Исправлено
curlsisyphus8.4.0-alt18.7.1-alt2ALT-PU-2023-6259-1331441Исправлено
curlsisyphus_e2k8.4.0-alt18.7.1-alt2ALT-PU-2023-6291-1-Исправлено
curlsisyphus_riscv648.4.0-alt18.7.1-alt2ALT-PU-2023-6289-1-Исправлено
curlp108.4.0-alt18.7.1-alt2ALT-PU-2023-6261-2331443Исправлено
curlp10_e2k8.4.0-alt18.7.1-alt2ALT-PU-2023-6814-1-Исправлено
curlc10f18.4.0-alt18.6.0-alt1ALT-PU-2023-6409-2331445Исправлено
curlc9f28.4.0-alt18.6.0-alt1ALT-PU-2023-6453-2331446Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://curl.se/docs/CVE-2023-38545.html
  • Patch
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20231027-0009/
  • Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
  • Mailing List
  • Third Party Advisory
https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/
  • Patch
  • Third Party Advisory
https://support.apple.com/kb/HT214063
  • Third Party Advisory
https://support.apple.com/kb/HT214057
  • Third Party Advisory
https://support.apple.com/kb/HT214058
  • Third Party Advisory
https://support.apple.com/kb/HT214036
  • Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jan/34
  • Mailing List
  • Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jan/37
  • Mailing List
  • Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jan/38
  • Mailing List
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20240201-0005/
  • Third Party Advisory

    1. Конфигурация 1

      cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*
      Start including
      7.69.0
      End excliding
      8.4.0

      Конфигурация 2

      cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

      Конфигурация 3

      cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
      cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

      Конфигурация 4

      cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
      End excliding
      10.0.19045.3693
      cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
      End excliding
      10.0.22000.2600
      cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
      End excliding
      10.0.22621.2715
      cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
      End excliding
      10.0.22631.2715
      cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
      End excliding
      10.0.17763.5122
      cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
      End excliding
      10.0.17763.5122
      cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
      End excliding
      10.0.20348.2113
      cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
      End excliding
      10.0.19044.3693
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Версия: v24.5.0
Наверх