Lucene search
GoogleOSV:USN-5079-3HistorySep 21, 2021 - 11:34 a.m.
curl vulnerabilities
2021-09-2111:34:54
Google
osv.dev
7
curl vulnerability fix
ubuntu 18.04 lts regression
mqtt server memory
cve-2021-22945
tls upgrade
cve-2021-22946
starttls response
cve-2021-22947
denial of service
arbitrary code.
USN-5079-1 fixed vulnerabilities in curl. One of the fixes introduced a
regression on Ubuntu 18.04 LTS. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that curl incorrect handled memory when sending data to
an MQTT server. A remote attacker could use this issue to cause curl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2021-22945)
Patrick Monnerat discovered that curl incorrectly handled upgrades to TLS.
When receiving certain responses from servers, curl would continue without
TLS even when the option to require a successful upgrade to TLS was
specified. (CVE-2021-22946)
Patrick Monnerat discovered that curl incorrectly handled responses
received before STARTTLS. A remote attacker could possibly use this issue
to inject responses and intercept communications. (CVE-2021-22947)
Related
nessus
nessus
Slackware Linux 14.0 / 14.1 / 14.2 / current curl Multiple Vulnerabilities (SSA:2021-258-01)
2021-09-16 00:00:00
Photon OS 4.0: Curl PHSA-2021-4.0-0102
2021-09-21 00:00:00
CentOS 9 : curl-7.76.1-12.el9
2024-02-29 00:00:00
photon
photon
openvas
openvas
Slackware: Security Advisory (SSA:2021-258-01)
2022-04-21 00:00:00
Mageia: Security Advisory (MGASA-2021-0438)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-5079-1)
2021-09-16 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2021-09-21 00:00:00
curl vulnerabilities
2021-09-15 00:00:00
curl regression
2021-09-21 00:00:00
slackware
slackware
[slackware-security] curl
2021-09-16 03:11:12
amazon
amazon
Medium: curl
2021-12-08 02:22:00
Medium: curl
2021-11-10 22:13:00
osv
osv
curl vulnerabilities
2021-09-15 11:11:13
curl - security update
2021-09-30 00:00:00
curl vulnerabilities
2021-09-15 12:34:55
mageia
mageia
Updated curl packages fix security vulnerability
2021-09-23 07:49:29
cloudfoundry
cloudfoundry
USN-5079-1: curl vulnerabilities | Cloud Foundry
2021-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: curl-7.79.1-1.fc35
2021-11-03 01:12:29
[SECURITY] Fedora 34 Update: curl-7.76.1-12.fc34
2021-09-21 15:33:29
[SECURITY] Fedora 33 Update: curl-7.71.1-11.fc33
2021-10-02 01:10:15
freebsd
freebsd
cURL -- Multiple vulnerabilities
2021-09-15 00:00:00
MySQL -- Multiple vulnerabilities
2022-01-18 00:00:00
almalinux
almalinux
Moderate: curl security update
2021-11-02 07:49:01
redhat
redhat
(RHSA-2022:0635) Moderate: curl security update
2022-02-22 14:34:54
(RHSA-2021:4059) Moderate: curl security update
2021-11-02 07:49:01
(RHSA-2022:1354) Moderate: rh-dotnet31-curl security update
2022-04-13 13:42:42
oraclelinux
oraclelinux
curl security update
2021-11-02 00:00:00
rocky
rocky
curl security update
2021-11-02 07:49:01
ibm
ibm
suse
suse
Security update for curl (moderate)
2021-10-06 00:00:00
Security update for curl (moderate)
2021-10-18 00:00:00
debian
debian
[SECURITY] [DLA 2773-1] curl security update
2021-09-30 21:58:49
[SECURITY] [DSA 5197-1] curl security update
2022-08-01 16:58:44
[SECURITY] [DLA 3085-1] curl security update
2022-08-28 23:00:51
cbl_mariner
cbl_mariner
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1
2022-04-09 06:51:45
CVE-2021-22945 affecting package curl 7.76.0-9
2021-10-05 03:00:51
CVE-2021-22946 affecting package curl for versions less than 7.82.0-1
2022-04-09 06:51:45
alpinelinux
alpinelinux
veracode
veracode
Denial Of Service (DoS)
2021-09-17 21:34:21
Denial Of Service (DoS)
2021-09-17 21:34:33
Man-In-The-Middle Attack (MitM)
2021-09-17 21:34:37
nvd
nvd
cve
cve
hackerone
hackerone
curl: CVE-2021-22945: UAF and double-free in MQTT sending
2021-07-19 18:20:56
curl: CVE-2021-22946: Protocol downgrade required TLS bypassed
2021-09-09 00:34:37
curl: CVE-2021-22947: STARTTLS protocol injection via MITM
2021-09-09 14:00:44
ubuntucve
ubuntucve
redhatcve
redhatcve
cvelist
cvelist
prion
prion
debiancve
debiancve
mscve
mscve
Open Source Curl Remote Code Execution Vulnerability
2022-01-11 08:00:00
krebs
krebs
‘Wormable’ Flaw Leads January 2022 Patch Tuesday
2022-01-11 22:18:55
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
malwarebytes
malwarebytes
hivepro
hivepro
Microsoft Patch Tuesday fixes critical zero-days along with 97 other flaws
2022-01-12 07:30:07
thn
thn
threatpost
threatpost
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
2022-01-11 21:54:57
ics
ics
Siemens RUGGEDCOM ROX
2023-07-13 12:00:00
Siemens SINEC INS
2022-03-10 12:00:00
apple
apple
About the security content of macOS Monterey 12.3
2022-03-14 00:00:00