CVE-2023-27536
MEDIUMlibcurl < 8.0.0 - Authentication Bypass via Connection Reuse
Title source: llmDescription
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
References (5)
Core 5
Core References
Exploit, Third Party Advisory
https://hackerone.com/reports/1895135
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230420-0010/
Mailing List, Third Party Advisory vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202310-12
Scores
CVSS v3
5.9
EPSS
0.0157
EPSS Percentile
72.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-305
CWE-287
Status
published
Products (11)
debian/debian_linux
10.0
fedoraproject/fedora
36
haxx/libcurl
7.22.0 - 7.88.1
netapp/active_iq_unified_manager
netapp/h300s_firmware
netapp/h410s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
netapp/ontap
9
splunk/universal_forwarder
9.1.0
... and 1 more
Published
Mar 30, 2023
Tracked Since
Feb 18, 2026