{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0522 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0522.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0522 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0522"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7087688 vom 2023-12-04",
        "url": "https://www.ibm.com/support/pages/node/7087688"
      },
      {
        "category": "external",
        "summary": "Security update for Dell NetWorker",
        "url": "https://www.dell.com/support/kbdoc/de-de/000215497/dsa-2023-233-security-update-for-dell-networker-curl-7-51-0"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:2225-1 vom 2023-05-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014912.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5365 vom 2023-02-27",
        "url": "https://lists.debian.org/debian-security-announce/2023/msg00054.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6958506 vom 2023-02-27",
        "url": "https://www.ibm.com/support/pages/node/6958506"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:1680-1 vom 2022-05-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011020.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-065 vom 2022-05-20",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-065.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2022-04-27",
        "url": "https://curl.se/docs/CVE-2022-27774.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2022-04-27",
        "url": "https://curl.se/docs/CVE-2022-27775.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2022-04-27",
        "url": "https://curl.se/docs/CVE-2022-27776.html"
      },
      {
        "category": "external",
        "summary": "Curl Security Advisory vom 2022-04-27",
        "url": "https://curl.se/docs/CVE-2022-22576.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2022-3517572083 vom 2022-04-29",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-3517572083"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5397-1 vom 2022-04-28",
        "url": "https://ubuntu.com/security/notices/USN-5397-1"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2022-1792 vom 2022-05-05",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1792.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-055 vom 2022-05-06",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-055.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:1564-1 vom 2022-05-07",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010964.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:1657-1 vom 2022-05-13",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010999.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5313 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5313"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5245 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5245"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-5245 vom 2022-07-01",
        "url": "http://linux.oracle.com/errata/ELSA-2022-5245.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-5313 vom 2022-07-01",
        "url": "http://linux.oracle.com/errata/ELSA-2022-5313.html"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0098998 vom 2022-07-19",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0098998"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5197 vom 2022-08-01",
        "url": "https://lists.debian.org/debian-security-announce/2022/msg00166.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20220609-0008 vom 2022-08-19",
        "url": "https://security.netapp.com/advisory/ntap-20220609-0008/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3085 vom 2022-08-29",
        "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6621463 vom 2022-09-20",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-libcurl-affect-ibm-spectrum-protect-plus-sql-file-indexing-and-windows-host-agents/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8299 vom 2022-11-15",
        "url": "https://access.redhat.com/errata/RHSA-2022:8299"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1646 vom 2022-12-10",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1646.html"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202212-01 vom 2022-12-19",
        "url": "https://security.gentoo.org/glsa/202212-01"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6855297 vom 2023-01-13",
        "url": "https://www.ibm.com/support/pages/node/6855297"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3288 vom 2023-01-29",
        "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5330 vom 2023-01-28",
        "url": "https://www.debian.org/security/2023/dsa-5330"
      }
    ],
    "source_lang": "en-US",
    "title": "cURL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-12-04T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:29:48.743+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-0522",
      "initial_release_date": "2022-04-26T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-04-26T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-04-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fedora und Ubuntu aufgenommen"
        },
        {
          "date": "2022-05-05T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-05-08T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Amazon und SUSE aufgenommen"
        },
        {
          "date": "2022-05-11T22:00:00.000+00:00",
          "number": "5",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-8277BEF335"
        },
        {
          "date": "2022-05-15T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-05-16T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-05-19T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-06-30T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-07-03T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-07-18T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-08-01T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-08-21T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-08-28T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-09-01T22:00:00.000+00:00",
          "number": "15",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-BCA2C95559"
        },
        {
          "date": "2022-09-19T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-11-15T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-12-11T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-12-18T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2023-01-12T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-01-29T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-02-27T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von IBM und Debian aufgenommen"
        },
        {
          "date": "2023-05-16T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-07-04T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2023-12-04T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "25"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell NetWorker \u003c 19.9.0.1",
            "product": {
              "name": "Dell NetWorker \u003c 19.9.0.1",
              "product_id": "T028404",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:networker:19.9.0.1"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HCL BigFix",
            "product": {
              "name": "HCL BigFix",
              "product_id": "T017494",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltech:bigfix:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM QRadar SIEM 7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM QRadar SIEM 7.4",
                "product": {
                  "name": "IBM QRadar SIEM 7.4",
                  "product_id": "T025626",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "category": "product_name",
            "name": "IBM Security Guardium 11.5",
            "product": {
              "name": "IBM Security Guardium 11.5",
              "product_id": "1411051",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_guardium:11.5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Verify Access \u003c 10.0.5-ISS-ISVA-FP000",
            "product": {
              "name": "IBM Security Verify Access \u003c 10.0.5-ISS-ISVA-FP000",
              "product_id": "T025829",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_verify_access:10.0.5-iss-isva-fp000"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Spectrum Protect Plus",
            "product": {
              "name": "IBM Spectrum Protect Plus",
              "product_id": "T023257",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spectrum_protect:::plus"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp Data ONTAP",
            "product": {
              "name": "NetApp Data ONTAP",
              "product_id": "7654",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:data_ontap:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source cURL \u003c 7.83.0",
            "product": {
              "name": "Open Source cURL \u003c 7.83.0",
              "product_id": "T022977",
              "product_identification_helper": {
                "cpe": "cpe:/a:curl:curl:7.83.0"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-22576",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. libcurl verwendet unter Umst\u00e4nden OAUTH2-authentifizierte Verbindungen wieder, ohne richtig sicherzustellen, dass die Verbindung mit denselben Anmeldeinformationen authentifiziert wurde, die f\u00fcr diese \u00dcbertragung festgelegt wurden. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Authentifizierung zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T017494",
          "T025829",
          "T022954",
          "2951",
          "T002207",
          "T000126",
          "T025626",
          "T028404",
          "398363",
          "T023257",
          "1411051"
        ]
      },
      "release_date": "2022-04-26T22:00:00.000+00:00",
      "title": "CVE-2022-22576"
    },
    {
      "cve": "CVE-2022-27774",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Die \"same host check\" Option funktioniert bei protokoll\u00fcbergreifenden Redirects nicht ordnungsgem\u00e4\u00df und betrachtet unterschiedliche Portnummern nicht als separate Hosts. Dies f\u00fchrt dazu, dass curl Anmeldeinformationen an andere Server weitergibt, wenn es Umleitungen von authentifizierten HTTP(S)-URLs zu anderen Protokollen und Portnummern verfolgt. Ein entfernter anonymer Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen. Zur erfolgreichen Ausnutzung ist eine Useraktion notwendig."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T017494",
          "T025829",
          "T022954",
          "2951",
          "T002207",
          "T000126",
          "T025626",
          "T028404",
          "398363",
          "T023257",
          "1411051"
        ]
      },
      "release_date": "2022-04-26T22:00:00.000+00:00",
      "title": "CVE-2022-27774"
    },
    {
      "cve": "CVE-2022-27775",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. Aufgrund von Fehlern in der Logik der Funktion, die eine Wiederverwendung von Verbindungen regelt, werden unter Umst\u00e4nden falsche Verbindungen wiederverwendet. Ein Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T017494",
          "T025829",
          "T022954",
          "2951",
          "T002207",
          "T000126",
          "T025626",
          "T028404",
          "398363",
          "T023257",
          "1411051"
        ]
      },
      "release_date": "2022-04-26T22:00:00.000+00:00",
      "title": "CVE-2022-27775"
    },
    {
      "cve": "CVE-2022-27776",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in cURL. curl kann f\u00e4lschlicherweise Authentifizierungs- oder Cookie-Header-Daten bei HTTP-Redirects zum selben Host, aber einer anderen Portnummer, anzeigen. Ein Angreifer kann diese Schwachstelle ausnutzen, um Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "7654",
          "T012167",
          "T004914",
          "T017494",
          "T025829",
          "T022954",
          "2951",
          "T002207",
          "T000126",
          "T025626",
          "T028404",
          "398363",
          "T023257",
          "1411051"
        ]
      },
      "release_date": "2022-04-26T22:00:00.000+00:00",
      "title": "CVE-2022-27776"
    }
  ]
}