CVE-2022-27781

Name	CVE-2022-27781
Description	libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DSA-5197-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
curl (PTS)	buster, buster (security)	7.64.0-4+deb10u2	vulnerable
	bullseye	7.74.0-1.3+deb11u1	vulnerable
	bullseye (security)	7.74.0-1.3+deb11u2	fixed
	bookworm, sid	7.84.0-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
curl	source	bullseye	7.74.0-1.3+deb11u2		DSA-5197-1
curl	source	(unstable)	7.83.1-1

Notes

https://www.openwall.com/lists/oss-security/2022/05/11/4
https://curl.se/docs/CVE-2022-27781.html
Introduced by: https://github.com/curl/curl/commit/f6c335d63f2da025a0a3efde1fe59e3bb7189b70 (curl-7_34_0)
Fixed by: https://github.com/curl/curl/commit/curl-7_83_1)