Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2021-22925 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-22925
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized ...
Haxx CurlFedoraproject Fedora 33Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Apple Macos 11.0Apple Mac Os X 10.15.7Apple Macos 11.0.1Apple Macos 11.1Apple Macos 11.1.0Apple Macos 11.2Apple Macos 11.2.1Apple Macos 11.3Apple Macos 11.3.1Apple Macos 11.4Apple Macos 11.5Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerSiemens Sinec Infrastructure Network Services
2.6
CVSSv2
CVE-2021-22923
When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents ...
Haxx CurlFedoraproject Fedora 33Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Oracle Mysql ServerSiemens Sinec Infrastructure Network ServicesNetapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
4.3
CVSSv2
CVE-2021-22922
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different...
Haxx CurlFedoraproject Fedora 33Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Oracle Mysql ServerSiemens Sinec Infrastructure Network ServicesNetapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0Splunk Universal Forwarder
4.3
CVSSv2
CVE-2021-22924
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case ins...
Haxx LibcurlFedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerSiemens Sinec Infrastructure Network ServicesSiemens Sinema Remote Connect ServerSiemens Logo\\! Cmr2040 FirmwareSiemens Logo\\! Cmr2020 FirmwareSiemens Ruggedcomrm 1224 Lte FirmwareSiemens Scalance M804pb FirmwareSiemens Scalance M812-1 FirmwareSiemens Scalance M816-1 FirmwareSiemens Scalance M826-2 Firmware
2.6
CVSSv2
CVE-2021-22898
curl 7.7 up to and including 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, l...
Haxx CurlDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Siemens Sinec Infrastructure Network ServicesSplunk Universal Forwarder 9.1.0Splunk Universal Forwarder
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook