CVE-2023-27538

Publication date 20 March 2023

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
curl	23.04 lunar	Fixed 7.88.1-6ubuntu2
	22.10 kinetic	Fixed 7.85.0-1ubuntu0.5
	22.04 LTS jammy	Fixed 7.81.0-1ubuntu1.10
	20.04 LTS focal	Fixed 7.68.0-1ubuntu2.18
	18.04 LTS bionic	Fixed 7.58.0-2ubuntu3.24
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected

Notes

mdeslaur

incomplete fix for CVE-2022-27782

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
curl	Upstream: af369db

Severity score breakdown

Parameter	Value
Base score	5.5 · Medium
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Related Ubuntu Security Notices (USN)

USN-5964-1
curl vulnerabilities
20 March 2023