Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- http://www.openwall.com/lists/oss-security/2022/10/26/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/26/4 Mailing List, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · haxx, netapp, splunkNVD modified 2026-10-14 17:17
Affected (CPE criteria) 11
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*
References 11
- http://www.openwall.com/lists/oss-security/2022/10/26/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/12/21/1 Mailing List, Third Party Advisory
- https://hackerone.com/reports/1557449 Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202212-01 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0009/ Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/26/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/12/21/1 Mailing List, Third Party Advisory
- https://hackerone.com/reports/1557449 Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202212-01 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0009/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html