CVE-2023-27537

MEDIUM

libcurl < 8.0.0 - Double Free via HSTS Data Sharing

Title source: llm
STIX 2.1

Description

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

References (3)

Core 3
Core References
Exploit, Third Party Advisory
https://hackerone.com/reports/1897203
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202310-12

Scores

CVSS v3 5.9
EPSS 0.0007
EPSS Percentile 21.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-415
Status published
Products (11)
broadcom/brocade_fabric_operating_system_firmware
haxx/libcurl 7.88.0
haxx/libcurl 7.88.1
netapp/active_iq_unified_manager
netapp/clustered_data_ontap 9.0
netapp/h300s_firmware
netapp/h410s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
splunk/universal_forwarder 9.1.0
... and 1 more
Published Mar 30, 2023
Tracked Since Feb 18, 2026