A recently discovered vulnerability, CVE-2022-43552, has been identified as a medium-severity issue affecting systems running certain versions of curl, Apple macOS, and Splunk Universal Forwarder. This vulnerability is a use-after-free issue that can potentially lead to the disclosure of sensitive information or other negative impacts. Users of these systems are advised to update to the latest versions to mitigate the risk associated with this vulnerability.

How do I know if I'm affected?

If you're wondering whether your system is affected by the vulnerability, you should check the software versions you're using. The vulnerability impacts curl versions before 7.87.0, Apple macOS versions from 13.0 up to (but not including) 13.3, and Splunk Universal Forwarder versions from 8.2.0 up to 8.2.12, 9.0.0 up to 9.0.6, and version 9.1.0. If your software falls within these ranges, your system may be at risk.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to update your software to the latest version. For curl, upgrade to version 7.87.0 or later. If you're using macOS, update to macOS Ventura 13.3 through the Mac App Store or Apple's Software Downloads website. For Splunk Universal Forwarder, update to a version outside the affected ranges. Always keep your software up-to-date to minimize security risks.

Is CVE-2022-43552 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-43552 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This medium-severity issue, a use-after-free vulnerability in curl versions before 7.87.0, can potentially lead to the disclosure of sensitive information. To mitigate the risk, users should update their software to the latest version.

Weakness enumeration

The CVE-2022-43552 vulnerability is a use-after-free issue in curl, identified as CWE-416. Updating affected software can help prevent potential disclosure of sensitive information.

For more details

CVE-2022-43552, a medium-severity use-after-free vulnerability, affects curl, macOS, and Splunk Universal Forwarder. Updating to the latest software versions mitigates the risk of sensitive information disclosure. For a comprehensive analysis of the vulnerability, including its description, severity, technical details, and affected software configurations, visit the NVD page or the links below.

• Full Disclosure: APPLE-SA-2023-03-27-3 macOS Ventura 13.3

• curl | Report #1764858 - CVE-2022-43552: HTTP Proxy deny use-after-free | HackerOne

• curl: Multiple Vulnerabilities (GLSA 202310-12) — Gentoo security

• December 2022 cURL/libcURL Vulnerabilities in NetApp Products | NetApp Product Security