Description
When doing a second SMB request to the same host again, curl would wrongly use
a data pointer pointing into already freed memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages3 packages
🔴Vulnerability Details
3CVEListuse after free in SMB connection reuse↗2026-03-11 GHSAGHSA-2289-hhfc-p684: When doing a second SMB request to the same host again, curl would wrongly use
a data pointer pointing into already freed memory↗2026-03-11 OSVCVE-2026-3805: When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory↗2026-03-11 📋Vendor Advisories
4Ubuntucurl vulnerabilities↗2026-03-11 Red Hatcurl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling↗2026-03-11 Microsoftuse after free in SMB connection reuse↗2026-03-10 DebianCVE-2026-3805: curl - When doing a second SMB request to the same host again, curl would wrongly use a...↗2026 🕵️Threat Intelligence
1WizCVE-2026-3805 Impact, Exploitability, and Mitigation Steps | Wiz↗ 💬Community
3BugzillaCVE-2026-3805 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling [fedora-43]↗2026-03-11 HackerOneCVE-2026-3805: use after free in SMB connection reuse↗2026-03-11 BugzillaCVE-2026-3805 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling [fedora-42]↗2026-03-11