Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-22898HistoryJun 11, 2021 - 4:15 p.m.
CVE-2021-22898
2021-06-1116:15:11
Debian Security Bug Tracker
security-tracker.debian.org
12
0.002 Low
EPSS
Percentile
58.1%
curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPT_TELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | curl | < 7.79.1-1 | curl_7.79.1-1_all.deb |
| Debian | 11 | all | curl | < 7.74.0-1.3+deb11u2 | curl_7.74.0-1.3+deb11u2_all.deb |
| Debian | 10 | all | curl | < 7.64.0-4+deb10u3 | curl_7.64.0-4+deb10u3_all.deb |
| Debian | 999 | all | curl | < 7.79.1-1 | curl_7.79.1-1_all.deb |
| Debian | 13 | all | curl | < 7.79.1-1 | curl_7.79.1-1_all.deb |
Related
prion
prion
Stack overflow
2021-06-11 16:15:00
ubuntucve
ubuntucve
CVE-2021-22898
2021-05-26 00:00:00
CVE-2021-22925
2021-07-21 00:00:00
openvas
openvas
openSUSE: Security Advisory for curl (openSUSE-SU-2021:1762-1)
2021-07-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14760-1)
2021-07-01 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-2577)
2021-10-26 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-22898
2021-09-21 22:04:32
ibm
ibm
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2021-22898)
2022-04-22 13:35:52
Security Bulletin: IBM Aspera High-Speed Transfer Server, Endpoint, and Desktop Client are vulnerable to libcurl vulnerabilities (CVE-2021-22901, CVE-2021-22898)
2021-09-30 20:07:53
Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC
2021-11-01 20:13:42
nessus
nessus
EulerOS 2.0 SP5 : curl (EulerOS-SA-2021-2325)
2021-09-07 00:00:00
EulerOS 2.0 SP3 : curl (EulerOS-SA-2021-2577)
2021-10-25 00:00:00
openSUSE 15 Security Update : curl (openSUSE-SU-2021:1762-1)
2021-07-16 00:00:00
archlinux
archlinux
[ASA-202106-8] libcurl-gnutls: information disclosure
2021-06-01 00:00:00
[ASA-202106-9] lib32-libcurl-gnutls: information disclosure
2021-06-01 00:00:00
[ASA-202106-6] libcurl-compat: multiple issues
2021-06-01 00:00:00
cvelist
cvelist
CVE-2021-22898
2021-06-11 15:49:37
hackerone
hackerone
curl: CVE-2021-22898: TELNET stack contents disclosure
2021-04-27 09:49:43
curl: CVE-2021-22925: TELNET stack contents disclosure again
2021-06-11 12:15:31
osv
osv
CVE-2021-22898
2021-06-11 16:15:11
curl vulnerability
2022-01-20 11:40:36
Moderate: curl security and bug fix update
2021-11-09 09:38:13
cbl_mariner
cbl_mariner
CVE-2021-22898 affecting package curl for versions less than 7.76.0-5
2022-04-09 06:51:45
CVE-2021-22898 affecting package curl 7.76.0-9
2021-06-09 03:50:28
cve
cve
CVE-2021-22898
2021-06-11 16:15:11
veracode
veracode
Information Disclosure
2021-05-28 12:59:20
Information Disclosure
2021-07-22 05:50:58
f5
f5
K22415133 : cURL vulnerability CVE-2021-22898
2021-10-12 00:00:00
alpinelinux
alpinelinux
CVE-2021-22898
2021-06-11 16:15:11
mageia
mageia
Updated curl packages fix a security vulnerability
2021-06-09 00:45:12
redhatcve
redhatcve
CVE-2021-22898
2021-05-26 09:45:53
CVE-2021-22925
2021-07-21 09:20:15
fedora
fedora
[SECURITY] Fedora 34 Update: curl-7.76.1-3.fc34
2021-05-28 01:01:28
[SECURITY] Fedora 33 Update: curl-7.71.1-10.fc33
2021-08-07 01:14:48
[SECURITY] Fedora 33 Update: curl-7.71.1-11.fc33
2021-10-02 01:10:15
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0393
2021-05-26 00:00:00
Important Photon OS Security Update - PHSA-2021-0033
2021-05-26 00:00:00
Important Photon OS Security Update - PHSA-2021-0393
2021-05-26 00:00:00
ubuntu
ubuntu
curl vulnerability
2022-01-20 00:00:00
amazon
amazon
oraclelinux
oraclelinux
curl security and bug fix update
2021-11-16 00:00:00
cloudfoundry
cloudfoundry
USN-5021-1: curl vulnerabilities | Cloud Foundry
2021-09-07 00:00:00
almalinux
almalinux
Moderate: curl security and bug fix update
2021-11-09 09:38:13
redhat
redhat
(RHSA-2021:4511) Moderate: curl security and bug fix update
2021-11-09 09:38:13
(RHSA-2022:0318) Moderate: Red Hat OpenShift distributed tracing 2.1.0 security update
2022-01-27 16:46:55
(RHSA-2022:0434) Moderate: Release of OpenShift Serverless 1.20.0
2022-02-03 17:07:25
rocky
rocky
curl security and bug fix update
2021-11-09 09:38:13
gentoo
gentoo
cURL: Multiple vulnerabilities
2021-05-26 00:00:00
debian
debian
[SECURITY] [DSA 5197-1] curl security update
2022-08-01 16:58:44
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00