Heimdall Security Logo

CVE-2024-2398

Vulnérabilité élevée dans curl (curl)

CVSS 8.6 · Élevée
EPSS 36.1%
curl•curl•Versions : 7.71.0, <=7.82.0, <=7.79.1, 7.65.3, 7.45.0, 7.51.0, <=7.83.1, 7.84.0, <=7.61.0, <=7.62.0, <=8.5.0, 7.81.0, <=7.45.0, 7.77.0, 7.65.2, 7.52.1, <=7.44.0, 8.1.0, <=7.58.0, <=7.55.1, <=7.56.1, <=7.50.1, <=7.54.1, 7.48.0, <=7.61.1, <=7.71.0, 7.82.0, <=7.69.0, 7.64.1, <=7.47.1, <=7.64.0, <=8.1.2, 7.85.0, 7.56.0, <=7.53.0, 8.6.0, 8.4.0, 7.50.2, <=7.49.1, 7.78.0, 7.54.0, 7.79.1, <=7.50.2, <=7.50.3, <=7.64.1, <=7.70.0, <=7.52.0, 7.55.1, <=7.65.2, <=8.6.0, 7.83.0, 7.62.0, 8.1.2, <=7.69.1, <=8.1.0, <=7.74.0, 7.56.1, 7.83.1, 7.65.0, <=7.57.0, 7.49.1, 7.69.0, 7.68.0, <=7.50.0, <=7.59.0, 7.46.0, 7.53.0, 8.2.1, <=7.79.0, <=7.71.1, <=7.67.0, 7.71.1, 7.54.1, <=7.48.0, 8.3.0, 8.2.0, 7.57.0, 7.63.0, <=7.85.0, <=7.47.0, <=7.60.0, 7.47.0, 7.70.0, <=7.76.0, 8.1.1, 7.76.1, <=7.55.0, <=7.73.0, 7.50.0, <=7.76.1, <=7.77.0, <=7.88.0, <=7.65.3, <=8.0.0, <=7.81.0, 7.80.0, 7.76.0, 7.60.0, 7.49.0, 7.61.0, <=7.68.0, <=7.65.1, 7.88.1, 7.61.1, 7.88.0, <=7.65.0, <=7.49.0, 7.86.0, <=7.66.0, <=7.86.0, <=7.88.1, <=7.72.0, 7.53.1, 7.59.0, 7.66.0, 7.52.0, 7.65.1, 7.67.0, <=7.78.0, <=8.2.1, 7.69.1, <=7.56.0, <=7.51.0, <=7.54.0, <=8.0.1, 7.55.0, 7.79.0, 8.5.0, 7.64.0, 7.75.0, 7.73.0, 7.72.0, <=7.75.0, 7.47.1, <=7.80.0, <=7.83.0, 8.0.0, 7.87.0, 7.50.3, 7.44.0, <=8.3.0, <=7.53.1, <=7.52.1, <=7.46.0, <=8.4.0, 7.50.1, <=7.87.0, 8.0.1, <=8.1.1, <=8.2.0, 7.74.0, <=7.63.0, <=7.84.0, 7.58.0

Description

When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.

Gravité et risque d'exploitation

CVE-2024-2398 obtient un score CVSS de 8.6/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 36.08 %, ce qui la place devant 98.5 % des CVE référencées.

Que faire ?

  • Vérifiez si curl (versions 7.71.0, <=7.82.0, <=7.79.1, 7.65.3, 7.45.0, 7.51.0, <=7.83.1, 7.84.0, <=7.61.0, <=7.62.0, <=8.5.0, 7.81.0, <=7.45.0, 7.77.0, 7.65.2, 7.52.1, <=7.44.0, 8.1.0, <=7.58.0, <=7.55.1, <=7.56.1, <=7.50.1, <=7.54.1, 7.48.0, <=7.61.1, <=7.71.0, 7.82.0, <=7.69.0, 7.64.1, <=7.47.1, <=7.64.0, <=8.1.2, 7.85.0, 7.56.0, <=7.53.0, 8.6.0, 8.4.0, 7.50.2, <=7.49.1, 7.78.0, 7.54.0, 7.79.1, <=7.50.2, <=7.50.3, <=7.64.1, <=7.70.0, <=7.52.0, 7.55.1, <=7.65.2, <=8.6.0, 7.83.0, 7.62.0, 8.1.2, <=7.69.1, <=8.1.0, <=7.74.0, 7.56.1, 7.83.1, 7.65.0, <=7.57.0, 7.49.1, 7.69.0, 7.68.0, <=7.50.0, <=7.59.0, 7.46.0, 7.53.0, 8.2.1, <=7.79.0, <=7.71.1, <=7.67.0, 7.71.1, 7.54.1, <=7.48.0, 8.3.0, 8.2.0, 7.57.0, 7.63.0, <=7.85.0, <=7.47.0, <=7.60.0, 7.47.0, 7.70.0, <=7.76.0, 8.1.1, 7.76.1, <=7.55.0, <=7.73.0, 7.50.0, <=7.76.1, <=7.77.0, <=7.88.0, <=7.65.3, <=8.0.0, <=7.81.0, 7.80.0, 7.76.0, 7.60.0, 7.49.0, 7.61.0, <=7.68.0, <=7.65.1, 7.88.1, 7.61.1, 7.88.0, <=7.65.0, <=7.49.0, 7.86.0, <=7.66.0, <=7.86.0, <=7.88.1, <=7.72.0, 7.53.1, 7.59.0, 7.66.0, 7.52.0, 7.65.1, 7.67.0, <=7.78.0, <=8.2.1, 7.69.1, <=7.56.0, <=7.51.0, <=7.54.0, <=8.0.1, 7.55.0, 7.79.0, 8.5.0, 7.64.0, 7.75.0, 7.73.0, 7.72.0, <=7.75.0, 7.47.1, <=7.80.0, <=7.83.0, 8.0.0, 7.87.0, 7.50.3, 7.44.0, <=8.3.0, <=7.53.1, <=7.52.1, <=7.46.0, <=8.4.0, 7.50.1, <=7.87.0, 8.0.1, <=8.1.1, <=8.2.0, 7.74.0, <=7.63.0, <=7.84.0, 7.58.0) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE