CVE-2022-27779

Published on: Not Yet Published

Last Modified on: 01/05/2023 05:58:00 PM UTC

CVE-2022-27779

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Certain versions of Curl from Haxx contain the following vulnerability:

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.

CVE-2022-27779 has been assigned by [email protected] to track the vulnerability - currently rated as MEDIUM severity.

CVSS3 Score: 5.3 - MEDIUM

Attack Vector ^ⓘ	Attack Complexity	Privileges Required	User Interaction
NETWORK	LOW	NONE	NONE
Scope	Confidentiality Impact	Integrity Impact	Availability Impact
UNCHANGED	LOW	NONE	NONE

CVSS2 Score: 5 - MEDIUM

Access Vector^ⓘ	Access Complexity	Authentication
NETWORK	LOW	NONE
Confidentiality Impact	Integrity Impact	Availability Impact
PARTIAL	NONE	NONE

CVE References

Description	Tags ^ⓘ	Link
June 2022 Libcurl Vulnerabilities in NetApp Products \| NetApp Product Security	security.netapp.com text/html	CONFIRM security.netapp.com/advisory/ntap-20220609-0009/
curl: Multiple Vulnerabilities (GLSA 202212-01) — Gentoo security	security.gentoo.org text/html	GENTOO GLSA-202212-01
HackerOne	hackerone.com text/html	MISC hackerone.com/reports/1553301

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Related QID Numbers

282696 Fedora Security Update for curl (FEDORA-2022-d15a736748)
296082 Oracle Solaris 11.4 Support Repository Update (SRU) 48.126.1 Missing (CPUJUL2022)
354292 Amazon Linux Security Advisory for curl : ALAS2022-2022-206
354341 Amazon Linux Security Advisory for curl : ALAS2022-2022-065
354587 Amazon Linux Security Advisory for curl : ALAS-2022-206
355207 Amazon Linux Security Advisory for curl : ALAS2023-2023-083
502213 Alpine Linux Security Update for curl
591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)
690868 Free Berkeley Software Distribution (FreeBSD) Security Update for curl (11e36890-d28c-11ec-a06f-d4c9ef517024)
710693 Gentoo Linux curl Multiple Vulnerabilities (GLSA 202212-01)
902172 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9894)
902173 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9908)
902382 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9908-1)
903729 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9894-1)

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Haxx	Curl	All	All	All	All
Application	Netapp	Clustered Data Ontap	-	All	All	All
Hardware	Netapp	H300s	-	All	All	All
Operating System	Netapp	H300s Firmware	-	All	All	All
Hardware	Netapp	H410s	-	All	All	All
Operating System	Netapp	H410s Firmware	-	All	All	All
Hardware	Netapp	H500s	-	All	All	All
Operating System	Netapp	H500s Firmware	-	All	All	All
Hardware	Netapp	H700s	-	All	All	All
Operating System	Netapp	H700s Firmware	-	All	All	All
Operating System	Netapp	Hci Bootstrap Os	-	All	All	All
Hardware	Netapp	Hci Compute Node	-	All	All	All
Hardware	Netapp	Hci Compute Node	-	All	All	All
Application	Netapp	Solidfire Enterprise Sds Hci Storage Node	-	All	All	All
Application	Netapp	Solidfire Hci Management Node	-	All	All	All

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*:

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@bagder	CVE-2022-27778: removes wrong file on error CVE-2022-27779: cookie for trailing dot TLD CVE-2022-27780: percent-enc… twitter.com/i/web/status/1…	2022-05-11 06:44:32
@sidfm_jp	cURL の libcurl にトップレベルドメインの HTTP クッキーをセットする問題 (CVE-2022-27779) [42169] sid.softek.jp/content/show/4… #SIDfm #脆弱性情報	2022-05-12 08:00:05
@RedPacketSec	cURL libcurl security bypass \| CVE-2022-27779 - redpacketsecurity.com/curl-libcurl-s…	2022-05-12 09:01:12
@vigilance_en	[email protected] #Vulnerability of cURL: file write via Cookies. vigilance.fr/vulnerability/… Identifiers: #CVE-2022-27779.… twitter.com/i/web/status/1…	2022-05-13 07:09:04
@CVEreport	cve.report/CVE-2022-27779 libcurl wrongly allows cookies to be set for Top Level Domains TLDs if thehost name is p… twitter.com/i/web/status/1…	2022-06-02 16:35:48
@LinInfoSec	Curl - CVE-2022-27779: hackerone.com/reports/1553301	2022-06-02 17:00:13
/r/opnsense	already curl-7.83.0 is vulnerable:	2022-05-13 21:52:27