{"affected":[{"product":"https://github.com/curl/curl","source":"CNA: hackerone","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in 8.0.0"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:haxx:libcurl:7.88.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:haxx:libcurl:7.88.1:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:9.0:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.12","versionStartIncluding":"8.2.0","vulnerable":true},{"criteria":"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.6","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2023-27537","cwes":["CWE-415"],"description":"A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate \"handles\". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.","epss":{"date":"2026-11-02","percentile":0.79651,"score":0.01898},"exploits":[{"kind":"exploit","source":"support@hackerone.com","url":"https://hackerone.com/reports/1897203"},{"kind":"exploit","source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://hackerone.com/reports/1897203"}],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793661435623,"publishedAt":1680134400000,"references":[{"source":"CNA: hackerone","tags":[],"url":"https://hackerone.com/reports/1897203"},{"source":"CNA: hackerone","tags":[],"url":"https://security.netapp.com/advisory/ntap-20230420-0010/"},{"source":"CNA: hackerone","tags":["vendor-advisory"],"url":"https://security.gentoo.org/glsa/202310-12"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://hackerone.com/reports/1897203"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20230420-0010/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://security.gentoo.org/glsa/202310-12"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"},{"source":"support@hackerone.com","tags":["Exploit","Third Party Advisory"],"url":"https://hackerone.com/reports/1897203"},{"source":"support@hackerone.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202310-12"},{"source":"support@hackerone.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230420-0010/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://hackerone.com/reports/1897203"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202310-12"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230420-0010/"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"}],"remediation":[],"revision":"919f7abf4c71c8012bfa68efe62ccb54f46afd5869ef924f4049f09b1d42d9a7","sources":[{"modifiedAt":1793658730949,"name":"CNA: hackerone","retrievedAt":1793660916071,"url":"https://www.cve.org/CVERecord?id=CVE-2023-27537"},{"modifiedAt":1793661435623,"name":"NVD","retrievedAt":1793665077813,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27537"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660922069,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-27537"}],"ssvc":{"assessedAt":1793658719814,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2023-27537","updatedAt":1793665077813}