CVE-2021-22947

Katalog CVE

CVSS 5.9 · Medium EPSS 3,0%

Kerentanan Cryptographic Issues pada haxx curl, fedoraproject fedora +24 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server.

Rincian

Terbit di NVD

29 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-310: Cryptographic Issues
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

3,0% peluang dieksploitasi; lebih tinggi dari 87,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujul2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Mar/29 mailing list · advisory pihak ketiga
• https://hackerone.com/reports/1334763 exploit · issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTA... mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HW... mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202212-01 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20211029-0003/ advisory pihak ketiga
• https://support.apple.com/kb/HT213183 release notes · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5197 advisory pihak ketiga