Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-3805

Опубликовано: 11 мар. 2026
Источник: redhat
CVSS3: 6.3

Описание

A flaw was found in curl. When handling a second Server Message Block (SMB) request to the same host, curl incorrectly accesses memory that has already been freed. This memory corruption vulnerability, known as a use-after-free, could allow a remote attacker to potentially execute arbitrary code or cause a denial of service.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Confidential Compute Attestationbuild-of-trustee/trustee-rhel9Fix deferred
Confidential Compute Attestationconfidential-compute-attestation-tech-preview/trustee-rhel9Fix deferred
Confidential Compute Attestationopenshift-sandboxed-containers/osc-operator-bundleFix deferred
Confidential Compute Attestationopenshift-sandboxed-containers/osc-podvm-builder-rhel9Fix deferred
Confidential Compute Attestationopenshift-sandboxed-containers/osc-podvm-payload-rhel9Fix deferred
Confidential Compute Attestationopenshift-sandboxed-containers/osc-rhel9-operatorFix deferred
Logging Subsystem for Red Hat OpenShiftopenshift-logging/cluster-logging-operator-bundleFix deferred
Logging Subsystem for Red Hat OpenShiftopenshift-logging/cluster-logging-rhel9-operatorFix deferred
Logging Subsystem for Red Hat OpenShiftopenshift-logging/eventrouter-rhel9Fix deferred
Logging Subsystem for Red Hat OpenShiftopenshift-logging/fluentd-rhel9Fix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-825
https://bugzilla.redhat.com/show_bug.cgi?id=2446451curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
15 дней назад

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

CVSS3: 7.5
nvd
15 дней назад

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

msrc
13 дней назад

use after free in SMB connection reuse

CVSS3: 7.5
debian
15 дней назад

When doing a second SMB request to the same host again, curl would wro ...

CVSS3: 7.5
github
15 дней назад

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

6.3 Medium

CVSS3