curl vulnerability

What happened

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Affected versions

curl: 8.13.0 through before 8.14.2 (semver); 8.15.0 through before 8.16.1 (semver); 8.17.0 through before 8.19.0 (semver); f4831daa9b2a97e8a2921d6b62cc4dfdd0d8646e through before e090be9f73a7a71459ef678c7cc4b1f75e3ea883 (git); 8.18.0; 8.17.0; 8.16.0; 8.15.0; 8.14.1; 8.14.0; 8.13.0 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.