Vulnerability Description
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Haxx | Curl | >= 7.84.0, < 8.3.0 |
| Fedoraproject | Fedora | 37 |
| Microsoft | Windows 10 1809 | < 10.0.17763.5122 |
| Microsoft | Windows 10 21H2 | < 10.0.19044.3693 |
| Microsoft | Windows 10 22H2 | < 10.0.19045.3693 |
| Microsoft | Windows 11 21H2 | < 10.0.22000.2600 |
| Microsoft | Windows 11 22H2 | < 10.0.22621.2715 |
| Microsoft | Windows 11 23H2 | < 10.0.22631.2715 |
| Microsoft | Windows Server 2019 | < 10.0.17763.5122 |
| Microsoft | Windows Server 2022 | < 10.0.20348.2113 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2023/Oct/17Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/34Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/37Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/38Mailing ListThird Party Advisory
- https://hackerone.com/reports/2072338ExploitIssue TrackingPatch
- https://lists.fedoraproject.org/archives/list/[email protected]Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]Mailing List
- https://security.gentoo.org/glsa/202310-12Third Party Advisory
- https://security.netapp.com/advisory/ntap-20231013-0005/Third Party Advisory
- https://support.apple.com/kb/HT214036Third Party Advisory
- https://support.apple.com/kb/HT214057Third Party Advisory
- https://support.apple.com/kb/HT214058Third Party Advisory
- https://support.apple.com/kb/HT214063Third Party Advisory
- https://www.insyde.com/security-pledge/SA-2023064Third Party Advisory
FAQ
What is CVE-2023-38039?
CVE-2023-38039 is a vulnerability with a CVSS score of 7.5 (HIGH). When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large header...
How severe is CVE-2023-38039?
CVE-2023-38039 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-38039?
Check the references section above for vendor advisories and patch information. Affected products include: Haxx Curl, Fedoraproject Fedora, Microsoft Windows 10 1809, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2.