Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-27781

Description

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

POC

Reference

No PoCs from references.

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ShangzhiXu/VULTURE_Detector

- https://github.com/ShangzhiXu/Vulture

- https://github.com/fokypoky/places-list

- https://github.com/letranduytan/SecureFirewall-OSHardeningforWebOS