libcurl ASN1 Parser Heap Overflow via Invalid Generalized Time
CVE-2024-7264 Published on July 31, 2024

ASN.1 date parser overread
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.

NVD

Vulnerability Analysis

CVE-2024-7264 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

LOW

Products Associated with CVE-2024-7264

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-7264 are published in these products:

Haxx Libcurl

Canonical Ubuntu Linux

Oracle

Haxx Curl

Apple iOS

Apple iPadOS

Apple macOS

Apple Macos Sonoma

Apple tvOS

Apple watchOS

Apple visionOS

Affected Versions

curl:

Version 8.9.0, <= 8.9.0 is affected.
Version 8.8.0, <= 8.8.0 is affected.
Version 8.7.1, <= 8.7.1 is affected.
Version 8.7.0, <= 8.7.0 is affected.
Version 8.6.0, <= 8.6.0 is affected.
Version 8.5.0, <= 8.5.0 is affected.
Version 8.4.0, <= 8.4.0 is affected.
Version 8.3.0, <= 8.3.0 is affected.
Version 8.2.1, <= 8.2.1 is affected.
Version 8.2.0, <= 8.2.0 is affected.
Version 8.1.2, <= 8.1.2 is affected.
Version 8.1.1, <= 8.1.1 is affected.
Version 8.1.0, <= 8.1.0 is affected.
Version 8.0.1, <= 8.0.1 is affected.
Version 8.0.0, <= 8.0.0 is affected.
Version 7.88.1, <= 7.88.1 is affected.
Version 7.88.0, <= 7.88.0 is affected.
Version 7.87.0, <= 7.87.0 is affected.
Version 7.86.0, <= 7.86.0 is affected.
Version 7.85.0, <= 7.85.0 is affected.
Version 7.84.0, <= 7.84.0 is affected.
Version 7.83.1, <= 7.83.1 is affected.
Version 7.83.0, <= 7.83.0 is affected.
Version 7.82.0, <= 7.82.0 is affected.
Version 7.81.0, <= 7.81.0 is affected.
Version 7.80.0, <= 7.80.0 is affected.
Version 7.79.1, <= 7.79.1 is affected.
Version 7.79.0, <= 7.79.0 is affected.
Version 7.78.0, <= 7.78.0 is affected.
Version 7.77.0, <= 7.77.0 is affected.
Version 7.76.1, <= 7.76.1 is affected.
Version 7.76.0, <= 7.76.0 is affected.
Version 7.75.0, <= 7.75.0 is affected.
Version 7.74.0, <= 7.74.0 is affected.
Version 7.73.0, <= 7.73.0 is affected.
Version 7.72.0, <= 7.72.0 is affected.
Version 7.71.1, <= 7.71.1 is affected.
Version 7.71.0, <= 7.71.0 is affected.
Version 7.70.0, <= 7.70.0 is affected.
Version 7.69.1, <= 7.69.1 is affected.
Version 7.69.0, <= 7.69.0 is affected.
Version 7.68.0, <= 7.68.0 is affected.
Version 7.67.0, <= 7.67.0 is affected.
Version 7.66.0, <= 7.66.0 is affected.
Version 7.65.3, <= 7.65.3 is affected.
Version 7.65.2, <= 7.65.2 is affected.
Version 7.65.1, <= 7.65.1 is affected.
Version 7.65.0, <= 7.65.0 is affected.
Version 7.64.1, <= 7.64.1 is affected.
Version 7.64.0, <= 7.64.0 is affected.
Version 7.63.0, <= 7.63.0 is affected.
Version 7.62.0, <= 7.62.0 is affected.
Version 7.61.1, <= 7.61.1 is affected.
Version 7.61.0, <= 7.61.0 is affected.
Version 7.60.0, <= 7.60.0 is affected.
Version 7.59.0, <= 7.59.0 is affected.
Version 7.58.0, <= 7.58.0 is affected.
Version 7.57.0, <= 7.57.0 is affected.
Version 7.56.1, <= 7.56.1 is affected.
Version 7.56.0, <= 7.56.0 is affected.
Version 7.55.1, <= 7.55.1 is affected.
Version 7.55.0, <= 7.55.0 is affected.
Version 7.54.1, <= 7.54.1 is affected.
Version 7.54.0, <= 7.54.0 is affected.
Version 7.53.1, <= 7.53.1 is affected.
Version 7.53.0, <= 7.53.0 is affected.
Version 7.52.1, <= 7.52.1 is affected.
Version 7.52.0, <= 7.52.0 is affected.
Version 7.51.0, <= 7.51.0 is affected.
Version 7.50.3, <= 7.50.3 is affected.
Version 7.50.2, <= 7.50.2 is affected.
Version 7.50.1, <= 7.50.1 is affected.
Version 7.50.0, <= 7.50.0 is affected.
Version 7.49.1, <= 7.49.1 is affected.
Version 7.49.0, <= 7.49.0 is affected.
Version 7.48.0, <= 7.48.0 is affected.
Version 7.47.1, <= 7.47.1 is affected.
Version 7.47.0, <= 7.47.0 is affected.
Version 7.46.0, <= 7.46.0 is affected.
Version 7.45.0, <= 7.45.0 is affected.
Version 7.44.0, <= 7.44.0 is affected.
Version 7.43.0, <= 7.43.0 is affected.
Version 7.42.1, <= 7.42.1 is affected.
Version 7.42.0, <= 7.42.0 is affected.
Version 7.41.0, <= 7.41.0 is affected.
Version 7.40.0, <= 7.40.0 is affected.
Version 7.39.0, <= 7.39.0 is affected.
Version 7.38.0, <= 7.38.0 is affected.
Version 7.37.1, <= 7.37.1 is affected.
Version 7.37.0, <= 7.37.0 is affected.
Version 7.36.0, <= 7.36.0 is affected.
Version 7.35.0, <= 7.35.0 is affected.
Version 7.34.0, <= 7.34.0 is affected.
Version 7.33.0, <= 7.33.0 is affected.
Version 7.32.0, <= 7.32.0 is affected.

Siemens RUGGEDCOM RST2428P:

Before V3.3 is affected.

Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family:

Before V3.3 is affected.

Siemens SCALANCE XCH328:

Before V3.3 is affected.

Siemens SCALANCE XCM324:

Before V3.3 is affected.

Siemens SCALANCE XCM328:

Before V3.3 is affected.

Siemens SCALANCE XCM332:

Before V3.3 is affected.

Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (230 V AC, 12xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (230 V AC, 8xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (24 V DC, 12xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (24 V DC, 8xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (2x230 V AC, 12xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (2x230 V AC, 8xFO):

Before V3.3 is affected.

Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+):

Before V3.3 is affected.

Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP:

Version V3.1.0 and below V3.1.5 is affected.

Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP:

Version V3.1.0 and below V3.1.5 is affected.

Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP:

Version V3.1.0 and below V3.1.5 is affected.

Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP:

Version V3.1.0 and below V3.1.5 is affected.

Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP:

Version V3.1.0 and below V3.1.5 is affected.

Siemens RUGGEDCOM RST2428P:

Before V3.2 is affected.

Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family:

Before V3.2 is affected.

Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family:

Before V3.2 is affected.

Exploit Probability

EPSS

17.30%

Percentile

97.05%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

libcurl ASN1 Parser Heap Overflow via Invalid Generalized TimeCVE-2024-7264 Published on July 31, 2024

Vulnerability Analysis

Products Associated with CVE-2024-7264

Affected Versions

Exploit Probability

libcurl ASN1 Parser Heap Overflow via Invalid Generalized Time
CVE-2024-7264 Published on July 31, 2024