curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over th

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• debian debian linux10.0
• haxx curl7.62.0 and later · up to 7.70.0 inclusive
• siemens simatic tim 1531 irc firmwarebefore 2.2
• siemens sinec infrastructure network servicesbefore 1.0.1.1
• splunk universal forwarder8.2.0 and later · before 8.2.12
• splunk universal forwarder9.0.0 and later · before 9.0.6
• splunk universal forwarder9.1.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (hackerone). Independent of NVD's CPE analysis and usually ahead of it.

• n/a https://github.com/curl/curl

  • libcurl 7.62.0 to and including 7.70.0affected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2021-22901curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session t
  51Plan
• CVE-2023-38039When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API.
  47Plan
• CVE-2024-2398HTTP/2 push headers memory-leak
  45Plan

Published before and after this one in the same product

• ← EarlierCVE-2019-5481Sep 16, 2019 · Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
  41Plan
• ← EarlierCVE-2019-5482Sep 16, 2019 · Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
  44Plan
• Later →CVE-2020-8177Dec 14, 2020 · curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a loca
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.