CVE-2021-22925
Description
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.
How to fix
- haxx curl7.78.0 or later
- siemens sinec_infrastructure_network_services1.0.1.1 or later
- siemens sinema_remote_connect_server3.1 or later
- splunk universal_forwarder8.2.12, 9.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx curl | 7.7 ≤ v < 7.78.0 | 7.78.0 |
| fedoraproject fedora | 33 | — |
| netapp cloud_backup | No range specified | — |
| netapp clustered_data_ontap | No range specified | — |
| netapp hci_management_node | No range specified | — |
| netapp solidfire | No range specified | — |
| apple mac_os_x | 10.15.7 | — |
| apple macos | 11.0, 11.0.1, 11.1, 11.1.0, 11.2, 11.2.1, 11.3, 11.3.1, 11.4, 11.5 | — |
| oracle mysql_server | 5.7.0 ≤ v ≤ 5.7.35, 8.0.0 ≤ v ≤ 8.0.26 | — |
| oracle peoplesoft_enterprise_peopletools | 8.57, 8.58, 8.59 | — |
| siemens sinec_infrastructure_network_services | v < 1.0.1.1 | 1.0.1.1 |
| siemens sinema_remote_connect_server | v < 3.1 | 3.1 |
| netapp h300s_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
| netapp h300e_firmware | No range specified | — |
| netapp h500e_firmware | No range specified | — |
| netapp h700e_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
| splunk universal_forwarder | 8.2.0 ≤ v < 8.2.12, 9.0.0 ≤ v < 9.0.6, 9.1.0 | 8.2.12, 9.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.