CVE-2024-2004Interpretation Conflict in Curl

Severity
3.5LOWNVD
EPSS
0.8%
top 25.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 27
Latest updateJul 29

Description

When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been explicitly disabled. curl --proto -all,-http http://curl.se The flaw is only present if the set of selected protocols disables the entire set of available protocols, in itself a command with no practica

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages5 packages

NVDhaxx/curl7.85.08.7.0
Debianhaxx/curl< 7.88.1-10+deb12u6+2
Ubuntuhaxx/curl< 7.68.0-1ubuntu2.22+2
CVEListV5curl/curl8.6.08.6.0+15
NVDapple/macos13.013.6.8+2

Also affects: Ontap 9, Fedora 39, 40

🔴Vulnerability Details

5
OSV
curl vulnerabilities2024-04-29
GHSA
GHSA-97xx-95pm-5qv6: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set2024-03-27
CVEList
Usage of disabled protocol2024-03-27
OSV
CVE-2024-2004: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set2024-03-27
OSV
curl vulnerabilities2024-03-27

📋Vendor Advisories

9
Apple
CVE-2024-2004: macOS Sonoma 14.62024-07-29
Apple
CVE-2024-2004: macOS Ventura 13.6.82024-07-29
Apple
CVE-2024-2004: macOS Monterey 12.7.62024-07-29
Microsoft
Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability2024-05-14
Ubuntu
curl vulnerabilities2024-04-29

💬Community

3
HackerOne
Usage of disabled protocol in curl2024-03-29
HackerOne
CVE-2024-2004: Usage of disabled protocol2024-03-27
Bugzilla
CVE-2023-25775 kernel: irdma: Improper access control2023-08-11
CVE-2024-2004 — Interpretation Conflict in Haxx Curl | cvebase