csaf_microsoft - msrc

msrc_cve-2024-9681

Vulnerability from csaf_microsoft

Published

2024-11-02 00:00

Modified

2025-03-04 00:00

Summary

HSTS subdomain overwrites parent cache entry

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-9681 HSTS subdomain overwrites parent cache entry - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-9681.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "HSTS subdomain overwrites parent cache entry",
    "tracking": {
      "current_release_date": "2025-03-04T00:00:00.000Z",
      "generator": {
        "date": "2025-10-20T02:32:19.016Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-9681",
      "initial_release_date": "2024-11-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-01-29T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2025-01-30T00:00:00.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2025-02-01T00:00:00.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        },
        {
          "date": "2025-02-13T00:00:00.000Z",
          "legacy_version": "4",
          "number": "4",
          "summary": "Information published."
        },
        {
          "date": "2025-02-23T00:00:00.000Z",
          "legacy_version": "5",
          "number": "5",
          "summary": "Information published."
        },
        {
          "date": "2025-03-04T00:00:00.000Z",
          "legacy_version": "6",
          "number": "6",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              },
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 rust 1.72.0-10",
                "product": {
                  "name": "\u003ccbl2 rust 1.72.0-10",
                  "product_id": "18"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 rust 1.72.0-10",
                "product": {
                  "name": "cbl2 rust 1.72.0-10",
                  "product_id": "17183"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 rust 1.72.0-10",
                "product": {
                  "name": "\u003ccbl2 rust 1.72.0-10",
                  "product_id": "4"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 rust 1.72.0-10",
                "product": {
                  "name": "cbl2 rust 1.72.0-10",
                  "product_id": "19721"
                }
              }
            ],
            "category": "product_name",
            "name": "rust"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 mysql 8.0.40-3",
                "product": {
                  "name": "\u003ccbl2 mysql 8.0.40-3",
                  "product_id": "17"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 mysql 8.0.40-3",
                "product": {
                  "name": "cbl2 mysql 8.0.40-3",
                  "product_id": "17184"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 mysql 8.0.40-5",
                "product": {
                  "name": "\u003cazl3 mysql 8.0.40-5",
                  "product_id": "12"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 mysql 8.0.40-5",
                "product": {
                  "name": "azl3 mysql 8.0.40-5",
                  "product_id": "17577"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 mysql 8.0.40-6",
                "product": {
                  "name": "\u003cazl3 mysql 8.0.40-6",
                  "product_id": "8"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 mysql 8.0.40-6",
                "product": {
                  "name": "azl3 mysql 8.0.40-6",
                  "product_id": "19257"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 mysql 8.0.40-4",
                "product": {
                  "name": "\u003ccbl2 mysql 8.0.40-4",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 mysql 8.0.40-4",
                "product": {
                  "name": "cbl2 mysql 8.0.40-4",
                  "product_id": "19825"
                }
              }
            ],
            "category": "product_name",
            "name": "mysql"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 cmake 3.21.4-16",
                "product": {
                  "name": "\u003ccbl2 cmake 3.21.4-16",
                  "product_id": "16"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 cmake 3.21.4-16",
                "product": {
                  "name": "cbl2 cmake 3.21.4-16",
                  "product_id": "17185"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 cmake 3.30.3-4",
                "product": {
                  "name": "\u003cazl3 cmake 3.30.3-4",
                  "product_id": "11"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 cmake 3.30.3-4",
                "product": {
                  "name": "azl3 cmake 3.30.3-4",
                  "product_id": "17578"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 cmake 3.21.4-17",
                "product": {
                  "name": "\u003ccbl2 cmake 3.21.4-17",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 cmake 3.21.4-17",
                "product": {
                  "name": "cbl2 cmake 3.21.4-17",
                  "product_id": "19756"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 cmake 3.30.3-6",
                "product": {
                  "name": "\u003cazl3 cmake 3.30.3-6",
                  "product_id": "14"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 cmake 3.30.3-6",
                "product": {
                  "name": "azl3 cmake 3.30.3-6",
                  "product_id": "17464"
                }
              }
            ],
            "category": "product_name",
            "name": "cmake"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 curl 8.8.0-5",
                "product": {
                  "name": "\u003ccbl2 curl 8.8.0-5",
                  "product_id": "15"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 curl 8.8.0-5",
                "product": {
                  "name": "cbl2 curl 8.8.0-5",
                  "product_id": "17187"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 curl 8.8.0-4",
                "product": {
                  "name": "\u003cazl3 curl 8.8.0-4",
                  "product_id": "10"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 curl 8.8.0-4",
                "product": {
                  "name": "azl3 curl 8.8.0-4",
                  "product_id": "17579"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 curl 8.8.0-6",
                "product": {
                  "name": "\u003ccbl2 curl 8.8.0-6",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 curl 8.8.0-6",
                "product": {
                  "name": "cbl2 curl 8.8.0-6",
                  "product_id": "19799"
                }
              }
            ],
            "category": "product_name",
            "name": "curl"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 tensorflow 2.16.1-7",
                "product": {
                  "name": "\u003cazl3 tensorflow 2.16.1-7",
                  "product_id": "13"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 tensorflow 2.16.1-7",
                "product": {
                  "name": "azl3 tensorflow 2.16.1-7",
                  "product_id": "17541"
                }
              }
            ],
            "category": "product_name",
            "name": "tensorflow"
          },
          {
            "category": "product_name",
            "name": "azl3 tensorflow 2.16.1-9",
            "product": {
              "name": "azl3 tensorflow 2.16.1-9",
              "product_id": "9"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 rust 1.86.0-1",
            "product": {
              "name": "azl3 rust 1.86.0-1",
              "product_id": "5"
            }
          },
          {
            "category": "product_name",
            "name": "cbl2 tensorflow 2.11.1-2",
            "product": {
              "name": "cbl2 tensorflow 2.11.1-2",
              "product_id": "7"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 rust 1.75.0-14",
            "product": {
              "name": "azl3 rust 1.75.0-14",
              "product_id": "6"
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 rust 1.72.0-10 as a component of CBL Mariner 2.0",
          "product_id": "17086-18"
        },
        "product_reference": "18",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 rust 1.72.0-10 as a component of CBL Mariner 2.0",
          "product_id": "17183-17086"
        },
        "product_reference": "17183",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 mysql 8.0.40-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-17"
        },
        "product_reference": "17",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 mysql 8.0.40-3 as a component of CBL Mariner 2.0",
          "product_id": "17184-17086"
        },
        "product_reference": "17184",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 cmake 3.21.4-16 as a component of CBL Mariner 2.0",
          "product_id": "17086-16"
        },
        "product_reference": "16",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 cmake 3.21.4-16 as a component of CBL Mariner 2.0",
          "product_id": "17185-17086"
        },
        "product_reference": "17185",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 curl 8.8.0-5 as a component of CBL Mariner 2.0",
          "product_id": "17086-15"
        },
        "product_reference": "15",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 curl 8.8.0-5 as a component of CBL Mariner 2.0",
          "product_id": "17187-17086"
        },
        "product_reference": "17187",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 tensorflow 2.16.1-7 as a component of Azure Linux 3.0",
          "product_id": "17084-13"
        },
        "product_reference": "13",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 tensorflow 2.16.1-7 as a component of Azure Linux 3.0",
          "product_id": "17541-17084"
        },
        "product_reference": "17541",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 mysql 8.0.40-5 as a component of Azure Linux 3.0",
          "product_id": "17084-12"
        },
        "product_reference": "12",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 mysql 8.0.40-5 as a component of Azure Linux 3.0",
          "product_id": "17577-17084"
        },
        "product_reference": "17577",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 cmake 3.30.3-4 as a component of Azure Linux 3.0",
          "product_id": "17084-11"
        },
        "product_reference": "11",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 cmake 3.30.3-4 as a component of Azure Linux 3.0",
          "product_id": "17578-17084"
        },
        "product_reference": "17578",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 curl 8.8.0-4 as a component of Azure Linux 3.0",
          "product_id": "17084-10"
        },
        "product_reference": "10",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 curl 8.8.0-4 as a component of Azure Linux 3.0",
          "product_id": "17579-17084"
        },
        "product_reference": "17579",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 curl 8.8.0-6 as a component of CBL Mariner 2.0",
          "product_id": "17086-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 curl 8.8.0-6 as a component of CBL Mariner 2.0",
          "product_id": "19799-17086"
        },
        "product_reference": "19799",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 mysql 8.0.40-6 as a component of Azure Linux 3.0",
          "product_id": "17084-8"
        },
        "product_reference": "8",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 mysql 8.0.40-6 as a component of Azure Linux 3.0",
          "product_id": "19257-17084"
        },
        "product_reference": "19257",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 mysql 8.0.40-4 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 mysql 8.0.40-4 as a component of CBL Mariner 2.0",
          "product_id": "19825-17086"
        },
        "product_reference": "19825",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 rust 1.72.0-10 as a component of CBL Mariner 2.0",
          "product_id": "17086-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 rust 1.72.0-10 as a component of CBL Mariner 2.0",
          "product_id": "19721-17086"
        },
        "product_reference": "19721",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 tensorflow 2.16.1-9 as a component of Azure Linux 3.0",
          "product_id": "17084-9"
        },
        "product_reference": "9",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.86.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 cmake 3.21.4-17 as a component of CBL Mariner 2.0",
          "product_id": "17086-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 cmake 3.21.4-17 as a component of CBL Mariner 2.0",
          "product_id": "19756-17086"
        },
        "product_reference": "19756",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 cmake 3.30.3-6 as a component of Azure Linux 3.0",
          "product_id": "17084-14"
        },
        "product_reference": "14",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 cmake 3.30.3-6 as a component of Azure Linux 3.0",
          "product_id": "17464-17084"
        },
        "product_reference": "17464",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 tensorflow 2.11.1-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-7"
        },
        "product_reference": "7",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.75.0-14 as a component of Azure Linux 3.0",
          "product_id": "17084-6"
        },
        "product_reference": "6",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-9681",
      "cwe": {
        "id": "CWE-697",
        "name": "Incorrect Comparison"
      },
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "17084-9",
            "17086-7"
          ]
        },
        {
          "label": "vulnerable_code_not_in_execute_path",
          "product_ids": [
            "17084-5"
          ]
        },
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "17084-6"
          ]
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "curl",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17183-17086",
          "17184-17086",
          "17185-17086",
          "17187-17086",
          "17541-17084",
          "17577-17084",
          "17578-17084",
          "17579-17084",
          "19799-17086",
          "19257-17084",
          "19825-17086",
          "19721-17086",
          "19756-17086",
          "17464-17084"
        ],
        "known_affected": [
          "17086-18",
          "17086-17",
          "17086-16",
          "17086-15",
          "17084-13",
          "17084-12",
          "17084-11",
          "17084-10",
          "17086-2",
          "17084-8",
          "17086-1",
          "17086-4",
          "17086-3",
          "17084-14"
        ],
        "known_not_affected": [
          "17084-9",
          "17084-5",
          "17086-7",
          "17084-6"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-9681 HSTS subdomain overwrites parent cache entry - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-9681.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "1.72.0-10:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-18",
            "17086-4"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "8.0.40-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-17",
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "3.21.4-16:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-16",
            "17086-3"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "8.8.0-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-15",
            "17086-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "2.16.1-7:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-13"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "8.0.40-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-12",
            "17084-8"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "3.30.3-4:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-11",
            "17084-14"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-01-29T00:00:00.000Z",
          "details": "8.8.0-4:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-10"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "17086-18",
            "17086-17",
            "17086-16",
            "17086-15",
            "17084-13",
            "17084-12",
            "17084-11",
            "17084-10",
            "17086-2",
            "17084-8",
            "17086-1",
            "17086-4",
            "17086-3",
            "17084-14"
          ]
        }
      ],
      "title": "HSTS subdomain overwrites parent cache entry"
    }
  ]
}

CVE-2024-9681 (GCVE-0-2024-9681)

Vulnerability from cvelistv5

Published

2024-11-06 07:47

Modified

2024-12-13 13:09

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-1025 Comparison Using Wrong Factors

Summary

When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host. (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.) When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.

References

URL

Tags

	https://curl.se/docs/CVE-2024-9681.json
	https://curl.se/docs/CVE-2024-9681.html
	https://hackerone.com/reports/2764830

Impacted products

	Vendor	Product	Version
	curl	curl	Version: 8.10.1 ≤ 8.10.1 Version: 8.10.0 ≤ 8.10.0 Version: 8.9.1 ≤ 8.9.1 Version: 8.9.0 ≤ 8.9.0 Version: 8.8.0 ≤ 8.8.0 Version: 8.7.1 ≤ 8.7.1 Version: 8.7.0 ≤ 8.7.0 Version: 8.6.0 ≤ 8.6.0 Version: 8.5.0 ≤ 8.5.0 Version: 8.4.0 ≤ 8.4.0 Version: 8.3.0 ≤ 8.3.0 Version: 8.2.1 ≤ 8.2.1 Version: 8.2.0 ≤ 8.2.0 Version: 8.1.2 ≤ 8.1.2 Version: 8.1.1 ≤ 8.1.1 Version: 8.1.0 ≤ 8.1.0 Version: 8.0.1 ≤ 8.0.1 Version: 8.0.0 ≤ 8.0.0 Version: 7.88.1 ≤ 7.88.1 Version: 7.88.0 ≤ 7.88.0 Version: 7.87.0 ≤ 7.87.0 Version: 7.86.0 ≤ 7.86.0 Version: 7.85.0 ≤ 7.85.0 Version: 7.84.0 ≤ 7.84.0 Version: 7.83.1 ≤ 7.83.1 Version: 7.83.0 ≤ 7.83.0 Version: 7.82.0 ≤ 7.82.0 Version: 7.81.0 ≤ 7.81.0 Version: 7.80.0 ≤ 7.80.0 Version: 7.79.1 ≤ 7.79.1 Version: 7.79.0 ≤ 7.79.0 Version: 7.78.0 ≤ 7.78.0 Version: 7.77.0 ≤ 7.77.0 Version: 7.76.1 ≤ 7.76.1 Version: 7.76.0 ≤ 7.76.0 Version: 7.75.0 ≤ 7.75.0 Version: 7.74.0 ≤ 7.74.0

Show details on NVD website