What is CVE-2023-32001?

CVE-2023-32001 is a vulnerability related to libcurl, a widely used library for transferring data with URLs. The issue stems from a Time of Check to Time of Use (TOCTOU) race condition problem, which could allow an attacker to trick a victim into creating or overwriting protected files.

Who is impacted by this?

Specifically, those using libcurl versions from 7.84.0 up to 8.1.2, Debian Linux 12.0, and Fedora 37 are impacted by this issue. This vulnerability could potentially allow an attacker to trick a victim into creating or overwriting protected files.

What should I do if I’m affected?

If you're affected by the CVE-2023-32001 vulnerability, it's important to note that the CVE record has been rejected, as there are no safe measures or protections for this issue. As a result, there are no specific steps to mitigate the vulnerability or recommended actions for affected users.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-32001 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This vulnerability, published on July 26, 2023, has been marked as "REJECT" in the CVE List, meaning no specific actions are required or recommended for affected users.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-367, which involves a Time-of-check Time-of-use (TOCTOU) race condition issue.

Learn More

For a comprehensive understanding of this vulnerability, consult the NVD page and the references below.

• CVE Record | CVE