5.9

CVE-2022-43552: apple macos Use After Free

CVSS: 5.9v3.1MediumModified
AliasesALPINE-CVE-2022-43552SUSE-SU-2022:4598-1SUSE-SU-2022:4633-1
Published 09-02-2023Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2022-43552 is a medium (CVSS 5.9) Use After Free vulnerability in apple macos. EPSS estimates a 2.71% chance of exploitation in the next 30 days, higher than 85.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
34/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.9/10
010
Medium · v3.1 (CVE.org)
EPSS score
2.71%
0%100%
Low · +0.20 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 13 · Related 8
DLA-3288-1DSA-5330-1MGASA-2022-0483OPENSUSE-SU-2024:12583-1RHSA-2023:2478RHSA-2023:2963

Timeline

  1. 09-02-2023
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

CVSS metrics

8 scores · 8 sources · 1 version

EPSS trend

Probability

2.71%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

+0.20 pp

From 2.51% on 18-09-2026

18-09-202618-10-2026
EPSS score
2.71%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (hackerone.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse6 products
  • curl&distro=SUSE Linux Enterprise Micro 5.1< 7.66.0-150200.4.45.1
  • curl&distro=SUSE Linux Enterprise Micro 5.2< 7.66.0-150200.4.45.1
  • curl&distro=SUSE Linux Enterprise Real Time 15 SP3< 7.66.0-150200.4.45.1
  • curl&distro=SUSE Linux Enterprise Server 12 SP5< 7.60.0-11.52.1
  • curl&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 7.60.0-11.52.1
Redhat4 products
  • curl< 0:7.29.0-59.el7_9.2
  • curl-debuginfo< 0:7.29.0-59.el7_9.2
  • libcurl< 0:7.29.0-59.el7_9.2
  • libcurl-devel< 0:7.29.0-59.el7_9.2
Opensuse2 products
  • curl&distro=openSUSE Leap 15.3< 7.66.0-150200.4.45.1
  • curl&distro=openSUSE Leap Micro 5.2< 7.66.0-150200.4.45.1
Alpine1 product
  • curl< 7.79.1-r4 | < 7.80.0-r5 | < 7.83.1-r5 | < 7.87.0-r0
Apple1 product
Chainguard1 product
  • curl< 7.87.0-r0
Debian1 product
  • curl< 7.86.0-3
Haxx1 product
Splunk1 product
Ubuntu1 product
  • curl< 7.35.0-1ubuntu2.20+esm14 | < 7.47.0-1ubuntu2.19+esm7 | < 7.58.0-2ubuntu3.22 | < 7.68.0-1ubuntu2.15 | < 7.81.0-1ubuntu1.7
Wolfi1 product
  • curl< 7.87.0-r0

11 vendors · 20 products

References

25 links
Show all 25 references