CVE-2021-22946
High
Description
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Haxx Curl
PublishedSep 29, 2021
First seenSep 29, 2021
Weakness typeCWE-325CWE-325
How to fix
Update
- haxx curl7.79.0 or later
- apple macos12.3 or later
- siemens sinec_infrastructure_network_services1.0.1.1 or later
- splunk universal_forwarder8.2.12, 9.0.6 or later
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
- debian.org/security/2022/dsa-5197
- security.gentoo.org/glsa/202212-01
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx curl | 7.20.0 ≤ v < 7.79.0 | 7.79.0 |
| debian debian_linux | 9.0, 10.0, 11.0 | — |
| fedoraproject fedora | 33, 35 | — |
| netapp cloud_backup | No range specified | — |
| netapp clustered_data_ontap | No range specified | — |
| netapp oncommand_insight | No range specified | — |
| netapp oncommand_workflow_automation | No range specified | — |
| netapp snapcenter | No range specified | — |
| netapp h300s_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
| netapp h300e_firmware | No range specified | — |
| netapp h500e_firmware | No range specified | — |
| netapp h700e_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
| netapp solidfire_baseboard_management_controller_firmware | No range specified | — |
| oracle communications_cloud_native_core_binding_support_function | 1.11.0, 22.1.3 | — |
| oracle communications_cloud_native_core_network_function_cloud_native_environment | 1.10.0 | — |
| oracle communications_cloud_native_core_network_repository_function | 1.15.0, 1.15.1, 22.1.0, 22.2.0 | — |
| oracle communications_cloud_native_core_network_slice_selection_function | 1.8.0 | — |
| oracle communications_cloud_native_core_service_communication_proxy | 1.15.0 | — |
| oracle mysql_server | 5.7.0 ≤ v ≤ 5.7.35, 8.0.0 ≤ v ≤ 8.0.26 | — |
| oracle peoplesoft_enterprise_peopletools | 8.57, 8.58, 8.59 | — |
| apple macos | v < 12.3 | 12.3 |
| siemens sinec_infrastructure_network_services | v < 1.0.1.1 | 1.0.1.1 |
| oracle commerce_guided_search | 11.3.2 | — |
| oracle communications_cloud_native_core_console | 22.2.0 | — |
| oracle communications_cloud_native_core_security_edge_protection_proxy | 22.1.1 | — |
| splunk universal_forwarder | 8.2.0 ≤ v < 8.2.12, 9.0.0 ≤ v < 9.0.6, 9.1.0 | 8.2.12, 9.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.