CVE-2018-1000007

Опубликовано: 24 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the Location: response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom Authorization: headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.

Ссылки

http://www.openwall.com/lists/oss-security/2022/04/27/4
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1040274
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHBA-2019:0327
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3157
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3558
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1543
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0544
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0594
Third Party Advisory
https://curl.haxx.se/docs/adv_2018-b3bf.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/3554-1/
Third Party Advisory
https://usn.ubuntu.com/3554-2/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4098
Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/04/27/4
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1040274
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHBA-2019:0327
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3157
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3558
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1543
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Версия от 7.1 (включая) до 7.57.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Конфигурация 10

Одновременно

cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Версия до xcp2361 (исключая)

cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Конфигурация 11

Одновременно

cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Конфигурация 12

Одновременно

cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Конфигурация 13

Одновременно

cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Конфигурация 14

Одновременно

cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Конфигурация 15

Одновременно

cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Конфигурация 16

Одновременно

cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Версия до xcp3070 (исключая)

cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02928

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-1000007

CVSS3: 9.8

ubuntu

почти 8 лет назад

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.

CVE-2018-1000007

CVSS3: 6.5

redhat

почти 8 лет назад

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.

CVE-2018-1000007

CVSS3: 9.8

debian

почти 8 лет назад

libcurl 7.1 through 7.57.0 might accidentally leak authentication data ...

openSUSE-SU-2018:0236-1

suse-cvrf

почти 8 лет назад

Security update for curl

SUSE-SU-2018:0217-1

suse-cvrf

почти 8 лет назад

Security update for curl

EPSS

Процентиль: 86%

0.02928

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo