alibaba / alibaba/AliOS-Things
[Bug Report]: 发现与CVE-2021-22901类似的同源漏洞
- Dominant language
- C
- Stars
- 4.6k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
### Contact Details
1281750532@qq.com
### What happened?
我发现您的项目中`components/curl/lib/multi.c`文件中的`detach_connnection`函数可能存在UAF漏洞,相关触发逻辑类似CVE-2021-22901, 具体参考链接如下:
> CVE-2021-22901:
> NVD说明链接:
> https://nvd.nist.gov/vuln/detail/CVE-2021-22901
> commit修复链接:
> https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479
考虑到其可能存在的潜在风险,我愿意配合您以负责任的方式及时核实、解决和报告发现的漏洞。 如果您需要任何进一步的信息或帮助,请随时与我联系。如果需要,我也可以提交PR帮助您修复。 谢谢您,期待尽快收到您的回复!
### Version
master (Default)
### What soultions are you seeing the problem on?
_No response_
### Relevant log output
_No response_
Contributor guide
Research direction
Start with components/curl/lib/multi.c and inspect the detach_connnection function alongside the referenced CVE-2021-22901 report and curl commit. Determine whether the reported logic produces the same UAF condition; done means the finding is confirmed or ruled out and, if confirmed, its remediation is documented or implemented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100