alibaba / alibaba/AliOS-Things

[Bug Report]: 发现与CVE-2021-22901类似的同源漏洞

Open
#2,015 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
C
Stars
4.6k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

### Contact Details

1281750532@qq.com

### What happened?

我发现您的项目中`components/curl/lib/multi.c`文件中的`detach_connnection`函数可能存在UAF漏洞,相关触发逻辑类似CVE-2021-22901, 具体参考链接如下:

> CVE-2021-22901:
> NVD说明链接:
> https://nvd.nist.gov/vuln/detail/CVE-2021-22901
> commit修复链接:
> https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479

考虑到其可能存在的潜在风险,我愿意配合您以负责任的方式及时核实、解决和报告发现的漏洞。 如果您需要任何进一步的信息或帮助,请随时与我联系。如果需要,我也可以提交PR帮助您修复。 谢谢您,期待尽快收到您的回复!

### Version

master (Default)

### What soultions are you seeing the problem on?

_No response_

### Relevant log output

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with components/curl/lib/multi.c and inspect the detach_connnection function alongside the referenced CVE-2021-22901 report and curl commit. Determine whether the reported logic produces the same UAF condition; done means the finding is confirmed or ruled out and, if confirmed, its remediation is documented or implemented.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.