Vulnerabilities > CVE-2023-38545 - Out-of-bounds Write vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2023-10-18

Updated: 2024-04-01

Summary

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with.

Vulnerable Configurations

Part	Description	Count
Application	Haxx Haxx Libcurl 7.69.0 Haxx Libcurl 7.69.1 Haxx Libcurl 7.70.0 Haxx Libcurl 7.71.0 Haxx Libcurl 7.71.1 Haxx Libcurl 7.72.0 Haxx Libcurl 7.73.0 Haxx Libcurl 7.74.0 Haxx Libcurl 7.75.0 Haxx Libcurl 7.77.0 Haxx Libcurl 7.78.0 Haxx Libcurl 7.79.0 Haxx Libcurl 7.79.1 Haxx Libcurl 7.80.0 Haxx Libcurl 7.81.0 Haxx Libcurl 7.82.0 Haxx Libcurl 7.83.0 Haxx Libcurl 7.83.1 Haxx Libcurl 7.84.0 Haxx Libcurl 7.85.0 Haxx Libcurl 7.86.0 Haxx Libcurl 7.87.0 Haxx Libcurl 7.88.0 Haxx Libcurl 7.88.1 Haxx Libcurl 8.0.0 Haxx Libcurl 8.0.1 Haxx Libcurl 8.1.0 Haxx Libcurl 8.1.1 Haxx Libcurl 8.1.2 Haxx Libcurl 8.2.0 Haxx Libcurl 8.2.1 Haxx Libcurl 8.3.0	32
Application	Netapp Netapp Oncommand Workflow Automation - Netapp Oncommand Insight - Netapp Active IQ Unified Manager -	4
OS	Fedoraproject Fedoraproject Fedora 37	1
OS	Microsoft Microsoft Windows 10 22H2 - Microsoft Windows 10 22H2 10.0.19041.3570 Microsoft Windows 10 22H2 10.0.19042.2486 Microsoft Windows 10 22H2 10.0.19044.2486 Microsoft Windows 10 22H2 10.0.19045.2130 Microsoft Windows 10 22H2 10.0.19045.2251 Microsoft Windows 10 22H2 10.0.19045.2311 Microsoft Windows 10 22H2 10.0.19045.2364 Microsoft Windows 10 22H2 10.0.19045.2486 Microsoft Windows 10 22H2 10.0.19045.2546 Microsoft Windows 10 22H2 10.0.19045.2604 Microsoft Windows 10 22H2 10.0.19045.2673 Microsoft Windows 10 22H2 10.0.19045.2728 Microsoft Windows 10 22H2 10.0.19045.2788 Microsoft Windows 10 22H2 10.0.19045.2846 Microsoft Windows 10 22H2 10.0.19045.2913 Microsoft Windows 10 22H2 10.0.19045.2965 Microsoft Windows 10 22H2 10.0.19045.3031 Microsoft Windows 10 22H2 10.0.19045.3086 Microsoft Windows 10 22H2 10.0.19045.3087 Microsoft Windows 10 22H2 10.0.19045.3155 Microsoft Windows 10 22H2 10.0.19045.3208 Microsoft Windows 10 22H2 10.0.19045.3271 Microsoft Windows 10 22H2 10.0.19045.3324 Microsoft Windows 10 22H2 10.0.19045.3393 Microsoft Windows 10 22H2 10.0.19045.3448 Microsoft Windows 10 22H2 10.0.19045.3516 Microsoft Windows 10 22H2 10.0.19045.3570 Microsoft Windows 11 21H2 - Microsoft Windows 11 21H2 10.0.19044.2965 Microsoft Windows 11 21H2 10.0.22000.194 Microsoft Windows 11 21H2 10.0.22000.258 Microsoft Windows 11 21H2 10.0.22000.282 Microsoft Windows 11 21H2 10.0.22000.318 Microsoft Windows 11 21H2 10.0.22000.348 Microsoft Windows 11 21H2 10.0.22000.376 Microsoft Windows 11 21H2 10.0.22000.434 Microsoft Windows 11 21H2 10.0.22000.438 Microsoft Windows 11 21H2 10.0.22000.469 Microsoft Windows 11 21H2 10.0.22000.493 Microsoft Windows 11 21H2 10.0.22000.527 Microsoft Windows 11 21H2 10.0.22000.556 Microsoft Windows 11 21H2 10.0.22000.593 Microsoft Windows 11 21H2 10.0.22000.613 Microsoft Windows 11 21H2 10.0.22000.652 Microsoft Windows 11 21H2 10.0.22000.675 Microsoft Windows 11 21H2 10.0.22000.708 Microsoft Windows 11 21H2 10.0.22000.739 Microsoft Windows 11 21H2 10.0.22000.740 Microsoft Windows 11 21H2 10.0.22000.778 Microsoft Windows 11 21H2 10.0.22000.795 Microsoft Windows 11 21H2 10.0.22000.832 Microsoft Windows 11 21H2 10.0.22000.856 Microsoft Windows 11 21H2 10.0.22000.918 Microsoft Windows 11 21H2 10.0.22000.978 Microsoft Windows 11 21H2 10.0.22000.1042 Microsoft Windows 11 21H2 10.0.22000.1098 Microsoft Windows 11 21H2 10.0.22000.1100 Microsoft Windows 11 21H2 10.0.22000.1165 Microsoft Windows 11 21H2 10.0.22000.1219 Microsoft Windows 11 21H2 10.0.22000.1281 Microsoft Windows 11 21H2 10.0.22000.1335 Microsoft Windows 11 21H2 10.0.22000.1413 Microsoft Windows 11 21H2 10.0.22000.1455 Microsoft Windows 11 21H2 10.0.22000.1516 Microsoft Windows 11 21H2 10.0.22000.1574 Microsoft Windows 11 21H2 10.0.22000.1641 Microsoft Windows 11 21H2 10.0.22000.1696 Microsoft Windows 11 21H2 10.0.22000.1702 Microsoft Windows 11 21H2 10.0.22000.1761 Microsoft Windows 11 21H2 10.0.22000.1817 Microsoft Windows 11 21H2 10.0.22000.1880 Microsoft Windows 11 21H2 10.0.22000.1936 Microsoft Windows 11 21H2 10.0.22000.2003 Microsoft Windows 11 21H2 10.0.22000.2057 Microsoft Windows 11 21H2 10.0.22000.2124 Microsoft Windows 11 21H2 10.0.22000.2176 Microsoft Windows 11 21H2 10.0.22000.2245 Microsoft Windows 11 21H2 10.0.22000.2295 Microsoft Windows 11 21H2 10.0.22000.2360 Microsoft Windows 11 21H2 10.0.22000.2416 Microsoft Windows 11 21H2 10.0.22000.2482 Microsoft Windows 11 21H2 10.0.22000.2538 Microsoft Windows 11 22H2 - Microsoft Windows 11 22H2 10.0.22000.1413 Microsoft Windows 11 22H2 10.0.22000.1702 Microsoft Windows 11 22H2 10.0.22621.521 Microsoft Windows 11 22H2 10.0.22621.525 Microsoft Windows 11 22H2 10.0.22621.608 Microsoft Windows 11 22H2 10.0.22621.674 Microsoft Windows 11 22H2 10.0.22621.675 Microsoft Windows 11 22H2 10.0.22621.755 Microsoft Windows 11 22H2 10.0.22621.819 Microsoft Windows 11 22H2 10.0.22621.900 Microsoft Windows 11 22H2 10.0.22621.963 Microsoft Windows 11 22H2 10.0.22621.1105 Microsoft Windows 11 22H2 10.0.22621.1194 Microsoft Windows 11 22H2 10.0.22621.1265 Microsoft Windows 11 22H2 10.0.22621.1344 Microsoft Windows 11 22H2 10.0.22621.1413 Microsoft Windows 11 22H2 10.0.22621.1485 Microsoft Windows 11 22H2 10.0.22621.1555 Microsoft Windows 11 22H2 10.0.22621.1635 Microsoft Windows 11 22H2 10.0.22621.1702 Microsoft Windows 11 22H2 10.0.22621.1778 Microsoft Windows 11 22H2 10.0.22621.1848 Microsoft Windows 11 22H2 10.0.22621.1928 Microsoft Windows 11 22H2 10.0.22621.1992 Microsoft Windows 11 22H2 10.0.22621.2070 Microsoft Windows 11 22H2 10.0.22621.2134 Microsoft Windows 11 22H2 10.0.22621.2215 Microsoft Windows 11 22H2 10.0.22621.2275 Microsoft Windows 11 22H2 10.0.22621.2283 Microsoft Windows 11 22H2 10.0.22621.2361 Microsoft Windows 11 22H2 10.0.22621.2428 Microsoft Windows 11 23H2 - Microsoft Windows 11 23H2 10.0.22631.2428 Microsoft Windows 11 23H2 10.0.22631.2506 Microsoft Windows 10 1809 - Microsoft Windows 10 1809 10.0.17763.1 Microsoft Windows 10 1809 10.0.17763.55 Microsoft Windows 10 1809 10.0.17763.107 Microsoft Windows 10 1809 10.0.17763.134 Microsoft Windows 10 1809 10.0.17763.168 Microsoft Windows 10 1809 10.0.17763.194 Microsoft Windows 10 1809 10.0.17763.195 Microsoft Windows 10 1809 10.0.17763.253 Microsoft Windows 10 1809 10.0.17763.292 Microsoft Windows 10 1809 10.0.17763.316 Microsoft Windows 10 1809 10.0.17763.348 Microsoft Windows 10 1809 10.0.17763.379 Microsoft Windows 10 1809 10.0.17763.404 Microsoft Windows 10 1809 10.0.17763.437 Microsoft Windows 10 1809 10.0.17763.439 Microsoft Windows 10 1809 10.0.17763.475 Microsoft Windows 10 1809 10.0.17763.503 Microsoft Windows 10 1809 10.0.17763.504 Microsoft Windows 10 1809 10.0.17763.529 Microsoft Windows 10 1809 10.0.17763.557 Microsoft Windows 10 1809 10.0.17763.592 Microsoft Windows 10 1809 10.0.17763.593 Microsoft Windows 10 1809 10.0.17763.615 Microsoft Windows 10 1809 10.0.17763.652 Microsoft Windows 10 1809 10.0.17763.678 Microsoft Windows 10 1809 10.0.17763.720 Microsoft Windows 10 1809 10.0.17763.737 Microsoft Windows 10 1809 10.0.17763.740 Microsoft Windows 10 1809 10.0.17763.774 Microsoft Windows 10 1809 10.0.17763.775 Microsoft Windows 10 1809 10.0.17763.805 Microsoft Windows 10 1809 10.0.17763.832 Microsoft Windows 10 1809 10.0.17763.864 Microsoft Windows 10 1809 10.0.17763.914 Microsoft Windows 10 1809 10.0.17763.973 Microsoft Windows 10 1809 10.0.17763.1012 Microsoft Windows 10 1809 10.0.17763.1039 Microsoft Windows 10 1809 10.0.17763.1075 Microsoft Windows 10 1809 10.0.17763.1098 Microsoft Windows 10 1809 10.0.17763.1131 Microsoft Windows 10 1809 10.0.17763.1132 Microsoft Windows 10 1809 10.0.17763.1158 Microsoft Windows 10 1809 10.0.17763.1192 Microsoft Windows 10 1809 10.0.17763.1217 Microsoft Windows 10 1809 10.0.17763.1282 Microsoft Windows 10 1809 10.0.17763.1294 Microsoft Windows 10 1809 10.0.17763.1339 Microsoft Windows 10 1809 10.0.17763.1369 Microsoft Windows 10 1809 10.0.17763.1397 Microsoft Windows 10 1809 10.0.17763.1432 Microsoft Windows 10 1809 10.0.17763.1457 Microsoft Windows 10 1809 10.0.17763.1490 Microsoft Windows 10 1809 10.0.17763.1518 Microsoft Windows 10 1809 10.0.17763.1554 Microsoft Windows 10 1809 10.0.17763.1577 Microsoft Windows 10 1809 10.0.17763.1579 Microsoft Windows 10 1809 10.0.17763.1613 Microsoft Windows 10 1809 10.0.17763.1637 Microsoft Windows 10 1809 10.0.17763.1697 Microsoft Windows 10 1809 10.0.17763.1728 Microsoft Windows 10 1809 10.0.17763.1757 Microsoft Windows 10 1809 10.0.17763.1790 Microsoft Windows 10 1809 10.0.17763.1817 Microsoft Windows 10 1809 10.0.17763.1821 Microsoft Windows 10 1809 10.0.17763.1823 Microsoft Windows 10 1809 10.0.17763.1852 Microsoft Windows 10 1809 10.0.17763.1879 Microsoft Windows 10 1809 10.0.17763.1911 Microsoft Windows 10 1809 10.0.17763.1935 Microsoft Windows 10 1809 10.0.17763.1971 Microsoft Windows 10 1809 10.0.17763.1999 Microsoft Windows 10 1809 10.0.17763.2028 Microsoft Windows 10 1809 10.0.17763.2029 Microsoft Windows 10 1809 10.0.17763.2061 Microsoft Windows 10 1809 10.0.17763.2090 Microsoft Windows 10 1809 10.0.17763.2091 Microsoft Windows 10 1809 10.0.17763.2114 Microsoft Windows 10 1809 10.0.17763.2145 Microsoft Windows 10 1809 10.0.17763.2183 Microsoft Windows 10 1809 10.0.17763.2213 Microsoft Windows 10 1809 10.0.17763.2237 Microsoft Windows 10 1809 10.0.17763.2268 Microsoft Windows 10 1809 10.0.17763.2300 Microsoft Windows 10 1809 10.0.17763.2305 Microsoft Windows 10 1809 10.0.17763.2330 Microsoft Windows 10 1809 10.0.17763.2366 Microsoft Windows 10 1809 10.0.17763.2369 Microsoft Windows 10 1809 10.0.17763.2452 Microsoft Windows 10 1809 10.0.17763.2458 Microsoft Windows 10 1809 10.0.17763.2510 Microsoft Windows 10 1809 10.0.17763.2565 Microsoft Windows 10 1809 10.0.17763.2628 Microsoft Windows 10 1809 10.0.17763.2686 Microsoft Windows 10 1809 10.0.17763.2746 Microsoft Windows 10 1809 10.0.17763.2803 Microsoft Windows 10 1809 10.0.17763.2867 Microsoft Windows 10 1809 10.0.17763.2928 Microsoft Windows 10 1809 10.0.17763.2931 Microsoft Windows 10 1809 10.0.17763.2989 Microsoft Windows 10 1809 10.0.17763.3046 Microsoft Windows 10 1809 10.0.17763.3113 Microsoft Windows 10 1809 10.0.17763.3165 Microsoft Windows 10 1809 10.0.17763.3232 Microsoft Windows 10 1809 10.0.17763.3287 Microsoft Windows 10 1809 10.0.17763.3346 Microsoft Windows 10 1809 10.0.17763.3406 Microsoft Windows 10 1809 10.0.17763.3469 Microsoft Windows 10 1809 10.0.17763.3532 Microsoft Windows 10 1809 10.0.17763.3534 Microsoft Windows 10 1809 10.0.17763.3650 Microsoft Windows 10 1809 10.0.17763.3653 Microsoft Windows 10 1809 10.0.17763.3887 Microsoft Windows 10 1809 10.0.17763.4010 Microsoft Windows 10 1809 10.0.17763.4131 Microsoft Windows 10 1809 10.0.17763.4252 Microsoft Windows 10 1809 10.0.17763.4377 Microsoft Windows 10 1809 10.0.17763.4499 Microsoft Windows 10 1809 10.0.17763.4645 Microsoft Windows 10 1809 10.0.17763.4737 Microsoft Windows 10 1809 10.0.17763.4851 Microsoft Windows 10 1809 10.0.17763.4974 Microsoft Windows Server 2019 - Microsoft Windows Server 2019 10.0.17763.4010 Microsoft Windows Server 2022 - Microsoft Windows Server 2022 10.0.20348.230 Microsoft Windows Server 2022 10.0.20348.261 Microsoft Windows Server 2022 10.0.20348.288 Microsoft Windows Server 2022 10.0.20348.320 Microsoft Windows Server 2022 10.0.20348.350 Microsoft Windows Server 2022 10.0.20348.380 Microsoft Windows Server 2022 10.0.20348.405 Microsoft Windows Server 2022 10.0.20348.407 Microsoft Windows Server 2022 10.0.20348.469 Microsoft Windows Server 2022 10.0.20348.473 Microsoft Windows Server 2022 10.0.20348.502 Microsoft Windows Server 2022 10.0.20348.524 Microsoft Windows Server 2022 10.0.20348.558 Microsoft Windows Server 2022 10.0.20348.587 Microsoft Windows Server 2022 10.0.20348.617 Microsoft Windows Server 2022 10.0.20348.643 Microsoft Windows Server 2022 10.0.20348.681 Microsoft Windows Server 2022 10.0.20348.707 Microsoft Windows Server 2022 10.0.20348.709 Microsoft Windows Server 2022 10.0.20348.740 Microsoft Windows Server 2022 10.0.20348.768 Microsoft Windows Server 2022 10.0.20348.803 Microsoft Windows Server 2022 10.0.20348.825 Microsoft Windows Server 2022 10.0.20348.859 Microsoft Windows Server 2022 10.0.20348.887 Microsoft Windows Server 2022 10.0.20348.946 Microsoft Windows Server 2022 10.0.20348.1006 Microsoft Windows Server 2022 10.0.20348.1070 Microsoft Windows Server 2022 10.0.20348.1129 Microsoft Windows Server 2022 10.0.20348.1131 Microsoft Windows Server 2022 10.0.20348.1194 Microsoft Windows Server 2022 10.0.20348.1249 Microsoft Windows Server 2022 10.0.20348.1251 Microsoft Windows Server 2022 10.0.20348.1311 Microsoft Windows Server 2022 10.0.20348.1366 Microsoft Windows Server 2022 10.0.20348.1368 Microsoft Windows Server 2022 10.0.20348.1487 Microsoft Windows Server 2022 10.0.20348.1547 Microsoft Windows Server 2022 10.0.20348.1607 Microsoft Windows Server 2022 10.0.20348.1668 Microsoft Windows Server 2022 10.0.20348.1724 Microsoft Windows Server 2022 10.0.20348.1726 Microsoft Windows Server 2022 10.0.20348.1787 Microsoft Windows Server 2022 10.0.20348.1850 Microsoft Windows Server 2022 10.0.20348.1906 Microsoft Windows Server 2022 10.0.20348.1970 Microsoft Windows Server 2022 10.0.20348.2031 Microsoft Windows 10 21H2 - Microsoft Windows 10 21H2 10.0.19041.3208 Microsoft Windows 10 21H2 10.0.19041.3570 Microsoft Windows 10 21H2 10.0.19041.3693 Microsoft Windows 10 21H2 10.0.19041.3803 Microsoft Windows 10 21H2 10.0.19042.1889 Microsoft Windows 10 21H2 10.0.19042.2486 Microsoft Windows 10 21H2 10.0.19043.1889 Microsoft Windows 10 21H2 10.0.19044.1288 Microsoft Windows 10 21H2 10.0.19044.1387 Microsoft Windows 10 21H2 10.0.19044.1415 Microsoft Windows 10 21H2 10.0.19044.1466 Microsoft Windows 10 21H2 10.0.19044.1469 Microsoft Windows 10 21H2 10.0.19044.1503 Microsoft Windows 10 21H2 10.0.19044.1526 Microsoft Windows 10 21H2 10.0.19044.1566 Microsoft Windows 10 21H2 10.0.19044.1586 Microsoft Windows 10 21H2 10.0.19044.1620 Microsoft Windows 10 21H2 10.0.19044.1645 Microsoft Windows 10 21H2 10.0.19044.1682 Microsoft Windows 10 21H2 10.0.19044.1706 Microsoft Windows 10 21H2 10.0.19044.1708 Microsoft Windows 10 21H2 10.0.19044.1741 Microsoft Windows 10 21H2 10.0.19044.1766 Microsoft Windows 10 21H2 10.0.19044.1767 Microsoft Windows 10 21H2 10.0.19044.1806 Microsoft Windows 10 21H2 10.0.19044.1826 Microsoft Windows 10 21H2 10.0.19044.1865 Microsoft Windows 10 21H2 10.0.19044.1889 Microsoft Windows 10 21H2 10.0.19044.1949 Microsoft Windows 10 21H2 10.0.19044.2006 Microsoft Windows 10 21H2 10.0.19044.2075 Microsoft Windows 10 21H2 10.0.19044.2130 Microsoft Windows 10 21H2 10.0.19044.2132 Microsoft Windows 10 21H2 10.0.19044.2193 Microsoft Windows 10 21H2 10.0.19044.2194 Microsoft Windows 10 21H2 10.0.19044.2251 Microsoft Windows 10 21H2 10.0.19044.2311 Microsoft Windows 10 21H2 10.0.19044.2364 Microsoft Windows 10 21H2 10.0.19044.2486 Microsoft Windows 10 21H2 10.0.19044.2546 Microsoft Windows 10 21H2 10.0.19044.2604 Microsoft Windows 10 21H2 10.0.19044.2673 Microsoft Windows 10 21H2 10.0.19044.2728 Microsoft Windows 10 21H2 10.0.19044.2788 Microsoft Windows 10 21H2 10.0.19044.2846 Microsoft Windows 10 21H2 10.0.19044.2965 Microsoft Windows 10 21H2 10.0.19044.3086 Microsoft Windows 10 21H2 10.0.19044.3087 Microsoft Windows 10 21H2 10.0.19044.3208 Microsoft Windows 10 21H2 10.0.19044.3324 Microsoft Windows 10 21H2 10.0.19044.3448 Microsoft Windows 10 21H2 10.0.19044.3570	972

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References