6.5
Moyenne
CVE-2023-46218 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than…
Description
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| curl | 8.4.0 | Pas de correctif indiqué |
| curl 7.46 | premières → < 7.46.0 | 7.46.0 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| RUGGEDCOM ROX MX5000 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX MX5000RE 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1400 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1500 2.17 | premières → < 2.17.0 | 2.17.0 |
Afficher les 8 autres branches Masquer les 8 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM ROX RX1501 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1510 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1511 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1512 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1524 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX1536 2.17 | premières → < 2.17.0 | 2.17.0 |
| RUGGEDCOM ROX RX5000 2.17 | premières → < 2.17.0 | 2.17.0 |
| SINEC NMS | Versions non publiées |
Références
- hackerone.com hackerone.com
- curl.se curl.se
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.debian.org lists.debian.org
- www.debian.org www.debian.org
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de curl
Les 98 CVE de curl →
CVE-2026-107929
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…
8.1
Élevée
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer
8.1
Élevée
CVE-2026-94266
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing…
7.5
Élevée
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might…
9.1
Critique