CVE-2021-22924
Description
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.
How to fix
- haxx libcurl7.77.0 or later
- siemens sinec_infrastructure_network_services1.0.1.1 or later
- siemens sinema_remote_connect_server3.1 or later
- siemens ruggedcomrm_1224_lte_firmware7.1 or later
- siemens scalance_m804pb_firmware7.1 or later
- siemens scalance_m812-1_firmware7.1 or later
- siemens scalance_m816-1_firmware7.1 or later
- siemens scalance_m826-2_firmware7.1 or later
- siemens scalance_m874-2_firmware7.1 or later
- siemens scalance_m874-3_firmware7.1 or later
- siemens scalance_m876-3_firmware7.1 or later
- siemens scalance_m876-4_firmware7.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx libcurl | 7.10.4 ≤ v < 7.77.0 | 7.77.0 |
| fedoraproject fedora | 33 | — |
| debian debian_linux | 9.0, 10.0, 11.0 | — |
| netapp cloud_backup | No range specified | — |
| netapp clustered_data_ontap | No range specified | — |
| netapp solidfire_\&_hci_management_node | No range specified | — |
| netapp solidfire_baseboard_management_controller_firmware | No range specified | — |
| oracle mysql_server | 5.7.0 ≤ v ≤ 5.7.36, 8.0.0 ≤ v ≤ 8.0.26 | — |
| oracle peoplesoft_enterprise_peopletools | 8.57, 8.58, 8.59 | — |
| siemens sinec_infrastructure_network_services | v < 1.0.1.1 | 1.0.1.1 |
| siemens sinema_remote_connect_server | v < 3.1 | 3.1 |
| siemens logo\!_cmr2040_firmware | No range specified | — |
| siemens logo\!_cmr2020_firmware | No range specified | — |
| siemens ruggedcomrm_1224_lte_firmware | v < 7.1 | 7.1 |
| siemens scalance_m804pb_firmware | v < 7.1 | 7.1 |
| siemens scalance_m812-1_firmware | v < 7.1 | 7.1 |
| siemens scalance_m816-1_firmware | v < 7.1 | 7.1 |
| siemens scalance_m826-2_firmware | v < 7.1 | 7.1 |
| siemens scalance_m874-2_firmware | v < 7.1 | 7.1 |
| siemens scalance_m874-3_firmware | v < 7.1 | 7.1 |
| siemens scalance_m876-3_firmware | v < 7.1 | 7.1 |
| siemens scalance_m876-4_firmware | v < 7.1 | 7.1 |
| siemens scalance_mum856-1_firmware | v < 7.1 | 7.1 |
| siemens scalance_s615_firmware | v < 7.1 | 7.1 |
| siemens simatic_cp_1543-1_firmware | v < 3.0.22 | 3.0.22 |
| siemens simatic_cp_1545-1_firmware | v < 1.1 | 1.1 |
| siemens simatic_rtu3010c_firmware | v < 5.0.14 | 5.0.14 |
| siemens simatic_rtu3030c_firmware | v < 5.0.14 | 5.0.14 |
| siemens simatic_rtu3031c_firmware | v < 5.0.14 | 5.0.14 |
| siemens simatic_rtu_3041c_firmware | v < 5.0.14 | 5.0.14 |
| siemens sinema_remote_connect | v < 3.1 | 3.1 |
| siemens siplus_net_cp_1543-1_firmware | v < 3.0.22 | 3.0.22 |
| splunk universal_forwarder | 8.2.0 ≤ v < 8.2.12, 9.0.0 ≤ v < 9.0.6, 9.1.0 | 8.2.12, 9.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.