{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-2398", "ASSIGNER": "cve@curl.se", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-772 Missing Release of Resource after Effective Lifetime " } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "curl", "product": { "product_data": [ { "product_name": "curl", "version": { "version_data": [ { "version_affected": "<=", "version_name": "8.6.0", "version_value": "8.6.0" }, { "version_affected": "<=", "version_name": "8.5.0", "version_value": "8.5.0" }, { "version_affected": "<=", "version_name": "8.4.0", "version_value": "8.4.0" }, { "version_affected": "<=", "version_name": "8.3.0", "version_value": "8.3.0" }, { "version_affected": "<=", "version_name": "8.2.1", "version_value": "8.2.1" }, { "version_affected": "<=", "version_name": "8.2.0", "version_value": "8.2.0" }, { "version_affected": "<=", "version_name": "8.1.2", "version_value": "8.1.2" }, { "version_affected": "<=", "version_name": "8.1.1", "version_value": "8.1.1" }, { "version_affected": "<=", "version_name": "8.1.0", "version_value": "8.1.0" }, { "version_affected": "<=", "version_name": "8.0.1", "version_value": "8.0.1" }, { "version_affected": "<=", "version_name": "8.0.0", "version_value": "8.0.0" }, { "version_affected": "<=", "version_name": "7.88.1", "version_value": "7.88.1" }, { "version_affected": "<=", "version_name": "7.88.0", "version_value": "7.88.0" }, { "version_affected": "<=", "version_name": "7.87.0", "version_value": "7.87.0" }, { "version_affected": "<=", "version_name": "7.86.0", "version_value": "7.86.0" }, { "version_affected": "<=", "version_name": "7.85.0", "version_value": "7.85.0" }, { "version_affected": "<=", "version_name": "7.84.0", "version_value": "7.84.0" }, { "version_affected": "<=", "version_name": "7.83.1", "version_value": "7.83.1" }, { "version_affected": "<=", "version_name": "7.83.0", "version_value": "7.83.0" }, { "version_affected": "<=", "version_name": "7.82.0", "version_value": "7.82.0" }, { "version_affected": "<=", "version_name": "7.81.0", "version_value": "7.81.0" }, { "version_affected": "<=", "version_name": "7.80.0", "version_value": "7.80.0" }, { "version_affected": "<=", "version_name": "7.79.1", "version_value": "7.79.1" }, { "version_affected": "<=", "version_name": "7.79.0", "version_value": "7.79.0" }, { "version_affected": "<=", "version_name": "7.78.0", "version_value": "7.78.0" }, { "version_affected": "<=", "version_name": "7.77.0", "version_value": "7.77.0" }, { "version_affected": "<=", "version_name": "7.76.1", "version_value": "7.76.1" }, { "version_affected": "<=", "version_name": "7.76.0", "version_value": "7.76.0" }, { "version_affected": "<=", "version_name": "7.75.0", "version_value": "7.75.0" }, { "version_affected": "<=", "version_name": "7.74.0", "version_value": "7.74.0" }, { "version_affected": "<=", "version_name": "7.73.0", "version_value": "7.73.0" }, { "version_affected": "<=", "version_name": "7.72.0", "version_value": "7.72.0" }, { "version_affected": "<=", "version_name": "7.71.1", "version_value": "7.71.1" }, { "version_affected": "<=", "version_name": "7.71.0", "version_value": "7.71.0" }, { "version_affected": "<=", "version_name": "7.70.0", "version_value": "7.70.0" }, { "version_affected": "<=", "version_name": "7.69.1", "version_value": "7.69.1" }, { "version_affected": "<=", "version_name": "7.69.0", "version_value": "7.69.0" }, { "version_affected": "<=", "version_name": "7.68.0", "version_value": "7.68.0" }, { "version_affected": "<=", "version_name": "7.67.0", "version_value": "7.67.0" }, { "version_affected": "<=", "version_name": "7.66.0", "version_value": "7.66.0" }, { "version_affected": "<=", "version_name": "7.65.3", "version_value": "7.65.3" }, { "version_affected": "<=", "version_name": "7.65.2", "version_value": "7.65.2" }, { "version_affected": "<=", "version_name": "7.65.1", "version_value": "7.65.1" }, { "version_affected": "<=", "version_name": "7.65.0", "version_value": "7.65.0" }, { "version_affected": "<=", "version_name": "7.64.1", "version_value": "7.64.1" }, { "version_affected": "<=", "version_name": "7.64.0", "version_value": "7.64.0" }, { "version_affected": "<=", "version_name": "7.63.0", "version_value": "7.63.0" }, { "version_affected": "<=", "version_name": "7.62.0", "version_value": "7.62.0" }, { "version_affected": "<=", "version_name": "7.61.1", "version_value": "7.61.1" }, { "version_affected": "<=", "version_name": "7.61.0", "version_value": "7.61.0" }, { "version_affected": "<=", "version_name": "7.60.0", "version_value": "7.60.0" }, { "version_affected": "<=", "version_name": "7.59.0", "version_value": "7.59.0" }, { "version_affected": "<=", "version_name": "7.58.0", "version_value": "7.58.0" }, { "version_affected": "<=", "version_name": "7.57.0", "version_value": "7.57.0" }, { "version_affected": "<=", "version_name": "7.56.1", "version_value": "7.56.1" }, { "version_affected": "<=", "version_name": "7.56.0", "version_value": "7.56.0" }, { "version_affected": "<=", "version_name": "7.55.1", "version_value": "7.55.1" }, { "version_affected": "<=", "version_name": "7.55.0", "version_value": "7.55.0" }, { "version_affected": "<=", "version_name": "7.54.1", "version_value": "7.54.1" }, { "version_affected": "<=", "version_name": "7.54.0", "version_value": "7.54.0" }, { "version_affected": "<=", "version_name": "7.53.1", "version_value": "7.53.1" }, { "version_affected": "<=", "version_name": "7.53.0", "version_value": "7.53.0" }, { "version_affected": "<=", "version_name": "7.52.1", "version_value": "7.52.1" }, { "version_affected": "<=", "version_name": "7.52.0", "version_value": "7.52.0" }, { "version_affected": "<=", "version_name": "7.51.0", "version_value": "7.51.0" }, { "version_affected": "<=", "version_name": "7.50.3", "version_value": "7.50.3" }, { "version_affected": "<=", "version_name": "7.50.2", "version_value": "7.50.2" }, { "version_affected": "<=", "version_name": "7.50.1", "version_value": "7.50.1" }, { "version_affected": "<=", "version_name": "7.50.0", "version_value": "7.50.0" }, { "version_affected": "<=", "version_name": "7.49.1", "version_value": "7.49.1" }, { "version_affected": "<=", "version_name": "7.49.0", "version_value": "7.49.0" }, { "version_affected": "<=", "version_name": "7.48.0", "version_value": "7.48.0" }, { "version_affected": "<=", "version_name": "7.47.1", "version_value": "7.47.1" }, { "version_affected": "<=", "version_name": "7.47.0", "version_value": "7.47.0" }, { "version_affected": "<=", "version_name": "7.46.0", "version_value": "7.46.0" }, { "version_affected": "<=", "version_name": "7.45.0", "version_value": "7.45.0" }, { "version_affected": "<=", "version_name": "7.44.0", "version_value": "7.44.0" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://curl.se/docs/CVE-2024-2398.json", "refsource": "MISC", "name": "https://curl.se/docs/CVE-2024-2398.json" }, { "url": "https://curl.se/docs/CVE-2024-2398.html", "refsource": "MISC", "name": "https://curl.se/docs/CVE-2024-2398.html" }, { "url": "https://hackerone.com/reports/2402845", "refsource": "MISC", "name": "https://hackerone.com/reports/2402845" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/", "refsource": "MISC", "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/", "refsource": "MISC", "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/" }, { "url": "http://www.openwall.com/lists/oss-security/2024/03/27/3", "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2024/03/27/3" }, { "url": "https://security.netapp.com/advisory/ntap-20240503-0009/", "refsource": "MISC", "name": "https://security.netapp.com/advisory/ntap-20240503-0009/" }, { "url": "https://support.apple.com/kb/HT214119", "refsource": "MISC", "name": "https://support.apple.com/kb/HT214119" }, { "url": "https://support.apple.com/kb/HT214118", "refsource": "MISC", "name": "https://support.apple.com/kb/HT214118" }, { "url": "https://support.apple.com/kb/HT214120", "refsource": "MISC", "name": "https://support.apple.com/kb/HT214120" }, { "url": "http://seclists.org/fulldisclosure/2024/Jul/20", "refsource": "MISC", "name": "http://seclists.org/fulldisclosure/2024/Jul/20" }, { "url": "http://seclists.org/fulldisclosure/2024/Jul/18", "refsource": "MISC", "name": "http://seclists.org/fulldisclosure/2024/Jul/18" }, { "url": "http://seclists.org/fulldisclosure/2024/Jul/19", "refsource": "MISC", "name": "http://seclists.org/fulldisclosure/2024/Jul/19" } ] }, "credits": [ { "lang": "en", "value": "w0x42 on hackerone" }, { "lang": "en", "value": "Stefan Eissing" } ] }