Lucene search

K
redosRedosROS-20221007-01
HistoryOct 07, 2022 - 12:00 a.m.

ROS-20221007-01

2022-10-0700:00:00
redos.red-soft.ru
20
curl
command vulnerability
remote attackers
control code cookies
denial of service
unix

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

50.8%

The cURL command line utility vulnerability is related to how cookies with control codes (byte values less than 32) are processed.
codes (byte values less than 32). Exploitation of the vulnerability could allow an attacker acting remotely to send a cookie containing such control codes to a remote user.
remotely to send a cookie containing control codes that would cause the server to return a response of
400, effectively allowing a โ€œsister siteโ€ to deny service to related sites

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64curl<ย 7.81.0-4UNKNOWN

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

50.8%