VULNERABILITY INTELLIGENCE
CVE-2022-35260
CVSS score6.5 MEDIUM
EPSS probability2.70%
CISA KEVNot currently listed
Published2022-12-05
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.
Weakness classification
- support@hackerone.com: CWE-125
- nvd@nist.gov: CWE-787
Primary references
- support@hackerone.com — Mailing List, Third Party Advisory
- support@hackerone.com — Mailing List, Third Party Advisory
- support@hackerone.com — Exploit, Patch, Third Party Advisory
- support@hackerone.com — Third Party Advisory
- support@hackerone.com — Third Party Advisory
- support@hackerone.com — Third Party Advisory
- support@hackerone.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory