Lucene search
Veracode Vulnerability DatabaseVERACODE:37692HistoryOct 26, 2022 - 11:37 a.m.
Denial Of Service (DoS)
2022-10-2611:37:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
libcurl vulnerability stack-based buffer overflow .netrc file crash
0.002 Low
EPSS
Percentile
52.1%
libcurl.so is vulnerable to denial of service. The vulnerability exists due to stack-based buffer overflow when curl is instructed to parse a .netrc file for credentials which allows an attacker to crash the application via malicious input.
References
seclists.org/fulldisclosure/2023/Jan/19
seclists.org/fulldisclosure/2023/Jan/20
access.redhat.com/security/cve/cve-2022-35260
github.com/curl/curl/commit/c97ec984fb2bc919a3aa863e0476dffa377b184c
hackerone.com/reports/1721098
secdb.alpinelinux.org/edge/main.yaml
security-tracker.debian.org/tracker/CVE-2022-35260
security.gentoo.org/glsa/202212-01
security.netapp.com/advisory/ntap-20230110-0006/
support.apple.com/kb/HT213604
support.apple.com/kb/HT213605
Related
nvd
nvd
CVE-2022-35260
2022-12-05 22:15:10
hackerone
hackerone
Internet Bug Bounty: CVE-2022-35260: .netrc parser out-of-bounds access
2022-10-27 15:19:47
curl: CVE-2022-35260: .netrc parser out-of-bounds access
2022-10-03 16:14:04
prion
prion
Stack overflow
2022-12-05 22:15:00
debiancve
debiancve
CVE-2022-35260
2022-12-05 22:15:10
redhatcve
redhatcve
CVE-2022-35260
2022-10-26 17:23:37
cbl_mariner
cbl_mariner
CVE-2022-35260 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
osv
osv
CVE-2022-35260
2022-12-05 22:15:10
.netrc parser out-of-bounds access
2022-10-26 08:00:00
curl vulnerabilities
2022-10-26 17:28:24
cve
cve
CVE-2022-35260
2022-12-05 22:15:10
cvelist
cvelist
CVE-2022-35260
2022-12-05 00:00:00
ubuntucve
ubuntucve
CVE-2022-35260
2022-10-26 00:00:00
alpinelinux
alpinelinux
CVE-2022-35260
2022-12-05 22:15:10
redos
redos
ROS-20221222-02
2022-12-22 00:00:00
nessus
nessus
openvas
openvas
Slackware: Security Advisory (SSA:2022-299-01)
2022-10-27 00:00:00
Oracle MySQL Server <= 5.7.40, 8.x <= 8.0.31 Security Update (cpujan2023) - Linux
2023-01-19 00:00:00
Fedora: Security Advisory for curl (FEDORA-2022-39688a779d)
2022-11-11 00:00:00
amazon
amazon
Medium: curl
2022-12-01 20:31:00
fedora
fedora
[SECURITY] Fedora 37 Update: curl-7.85.0-2.fc37
2022-11-10 22:54:26
[SECURITY] Fedora 36 Update: curl-7.82.0-9.fc36
2022-10-30 21:00:40
[SECURITY] Fedora 35 Update: curl-7.79.1-7.fc35
2022-11-10 16:21:52
ibm
ibm
freebsd
freebsd
curl -- multiple vulnerabilities
2022-10-26 00:00:00
slackware
slackware
[slackware-security] curl
2022-10-27 02:30:21
cloudfoundry
cloudfoundry
USN-5702-1: curl vulnerabilities | Cloud Foundry
2023-05-18 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2022-10-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0480
2022-10-29 00:00:00
Critical Photon OS Security Update - PHSA-2022-0533
2022-10-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0271
2022-10-28 00:00:00
ics
ics
Siemens SINEC NMS Third-Party
2023-05-11 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
apple
apple
About the security content of macOS Monterey 12.6.3
2023-01-23 00:00:00
About the security content of macOS Ventura 13.2
2023-01-23 00:00:00
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00