CVE-2022-27780

Published on: Not Yet Published

Last Modified on: 01/05/2023 05:57:00 PM UTC

CVE-2022-27780

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Certain versions of Curl from Haxx contain the following vulnerability:

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.

CVE-2022-27780 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.

CVSS3 Score: 7.5 - HIGH

Attack Vector ^ⓘ	Attack Complexity	Privileges Required	User Interaction
NETWORK	LOW	NONE	NONE
Scope	Confidentiality Impact	Integrity Impact	Availability Impact
UNCHANGED	NONE	HIGH	NONE

CVSS2 Score: 5 - MEDIUM

Access Vector^ⓘ	Access Complexity	Authentication
NETWORK	LOW	NONE
Confidentiality Impact	Integrity Impact	Availability Impact
NONE	PARTIAL	NONE

CVE References

Description	Tags ^ⓘ	Link
June 2022 Libcurl Vulnerabilities in NetApp Products \| NetApp Product Security	security.netapp.com text/html	CONFIRM security.netapp.com/advisory/ntap-20220609-0009/
curl: Multiple Vulnerabilities (GLSA 202212-01) — Gentoo security	security.gentoo.org text/html	GENTOO GLSA-202212-01
HackerOne	hackerone.com text/html	MISC hackerone.com/reports/1553841

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Related QID Numbers

198780 Ubuntu Security Notification for curl Vulnerabilities (USN-5412-1)
282696 Fedora Security Update for curl (FEDORA-2022-d15a736748)
296082 Oracle Solaris 11.4 Support Repository Update (SRU) 48.126.1 Missing (CPUJUL2022)
354292 Amazon Linux Security Advisory for curl : ALAS2022-2022-206
354341 Amazon Linux Security Advisory for curl : ALAS2022-2022-065
354587 Amazon Linux Security Advisory for curl : ALAS-2022-206
355207 Amazon Linux Security Advisory for curl : ALAS2023-2023-083
502213 Alpine Linux Security Update for curl
502408 Alpine Linux Security Update for curl
591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)
690868 Free Berkeley Software Distribution (FreeBSD) Security Update for curl (11e36890-d28c-11ec-a06f-d4c9ef517024)
710693 Gentoo Linux curl Multiple Vulnerabilities (GLSA 202212-01)
902169 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9895)
902174 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9909)
902387 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9909-1)
903755 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (9895-1)

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Haxx	Curl	All	All	All	All
Application	Netapp	Clustered Data Ontap	-	All	All	All
Hardware	Netapp	H300s	-	All	All	All
Operating System	Netapp	H300s Firmware	-	All	All	All
Hardware	Netapp	H410s	-	All	All	All
Operating System	Netapp	H410s Firmware	-	All	All	All
Hardware	Netapp	H500s	-	All	All	All
Operating System	Netapp	H500s Firmware	-	All	All	All
Hardware	Netapp	H700s	-	All	All	All
Operating System	Netapp	H700s Firmware	-	All	All	All
Operating System	Netapp	Hci Bootstrap Os	-	All	All	All
Hardware	Netapp	Hci Compute Node	-	All	All	All
Application	Netapp	Solidfire Enterprise Sds Hci Storage Node	-	All	All	All
Application	Netapp	Solidfire Hci Management Node	-	All	All	All

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*:
cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*:
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*:
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*:

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@bagder	CVE-2022-27778: removes wrong file on error CVE-2022-27779: cookie for trailing dot TLD CVE-2022-27780: percent-enc… twitter.com/i/web/status/1…	2022-05-11 06:44:32
@sidfm_jp	cURL に URL の解釈を誤る問題 (CVE-2022-27780) [42170] sid.softek.jp/content/show/4… #SIDfm #脆弱性情報	2022-05-12 08:00:06
@CVEreport	cve.report/CVE-2022-27780 The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding t… twitter.com/i/web/status/1…	2022-06-02 16:36:01
@LinInfoSec	Curl - CVE-2022-27780: hackerone.com/reports/1553841	2022-06-02 17:00:13
/r/opnsense	already curl-7.83.0 is vulnerable:	2022-05-13 21:52:27
/r/CyberNews	Security Bulletin: IBM MQ is vulnerable to issues with libcurl (CVE-2022-27780, CVE-2022-30115)	2022-08-25 07:47:42