CVE-2024-2398

Опубликовано: 27 мар. 2024

Источник: nvd

CVSS3: 8.6

EPSS Средний

Описание

When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.

Ссылки

http://seclists.org/fulldisclosure/2024/Jul/18
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jul/19
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jul/20
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/03/27/3
Mailing List
Third Party Advisory
https://curl.se/docs/CVE-2024-2398.html
Vendor Advisory
https://curl.se/docs/CVE-2024-2398.json
Vendor Advisory
https://hackerone.com/reports/2402845
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240503-0009/
Third Party Advisory
https://support.apple.com/kb/HT214118
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT214119
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT214120
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Jul/18
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jul/19
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jul/20
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/03/27/3
Mailing List
Third Party Advisory
https://curl.se/docs/CVE-2024-2398.html
Vendor Advisory
https://curl.se/docs/CVE-2024-2398.json
Vendor Advisory
https://hackerone.com/reports/2402845
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Версия от 7.44.0 (включая) до 8.7.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 12.7.6 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.6.8 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.6 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*

Конфигурация 10

Одновременно

cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*

Конфигурация 11

Одновременно

cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*

Конфигурация 12

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.36081

Средний

8.6 High

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVE-2024-2398

CVSS3: 8.6

ubuntu

больше 2 лет назад

CVE-2024-2398

CVSS3: 7.5

redhat

больше 2 лет назад

CVE-2024-2398

CVSS3: 8.6

msrc

почти 2 года назад

Описание отсутствует

CVE-2024-2398

CVSS3: 8.6

debian

больше 2 лет назад

When an application tells libcurl it wants to allow HTTP/2 server push ...

RLSA-2024:5654

rocky

около 1 года назад

Moderate: curl security update

EPSS

Процентиль: 98%

0.36081

Средний

8.6 High

CVSS3

Дефекты

CWE-772