Skip to content
Sign in
5.9 Medium

CVE-2022-32208 When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly

Description

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.

Affected products and versions

Product Affected versions Fixed in
https://github.com/curl/curl Versions not published
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SINAMICS PERFECT HARMONY GH180 Versions not published
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

Other CVEs of https://github.com/curl/curl

The 51 CVEs of https://github.com/curl/curl →
CVE-2023-28322 An information disclosure vulnerability exists in… 5.3 Medium CVE-2023-28319 A use after free vulnerability exists in… 7.5 High CVE-2023-28320 A denial of service vulnerability exists in… 5.9 Medium CVE-2023-28321 An improper certificate validation vulnerability exists in… 5.9 Medium
Track this CVE