The vulnerability of the cURL command-line utility arises from a logical error in the reused descriptor, which allows a hacker to trigger a service failure or cause other adverse effects on the system when processing subsequent HTTP requests like PUT and POST.

🗓️ 24 Dec 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

cURL has a logical error in a reused descriptor that can cause failures on later PUT and POST requests via CURLOPT_READFUNCTION.

Reporter	Title	Published	Views	Family All 349
FreeBSD	curl -- multiple vulnerabilities	26 Oct 202200:00	–	freebsd
FreeBSD	MySQL -- Multiple vulnerabilities	20 Jan 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libcURL affect IBM Rational ClearCase ( CVE-2022-42915, CVE-2022-42916, CVE-2022-32221, CVE-2022-35252, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207 )	31 Jan 202314:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	14 Mar 202316:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in libcurl (CVE-2022-32221)	17 May 202322:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	3 Mar 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to security restrictions bypass due to [CVE-2022-32221], [CVE-2023-27533], [CVE-2023-28322]	20 Jul 202315:15	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to security restrictions bypass due to curl (CVE-2022-32221)	26 May 202316:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	15 Apr 202502:31	–	ibm

Vulners

Node

novell suse_enterprise_storageMatch6aurora

novell suse_openstack_cloudMatch9aurora

novell suse_openstack_cloud_crowbarMatch9aurora

novell suse_linux_enterprise_high_performance_computingMatch15-esposaurora

novell suse_linux_enterprise_high_performance_computingMatch15-ltssaurora

red_hat jboss_core_servicesMatch1aurora

novell suse_caas_platformMatch4.0aurora

novell suse_enterprise_storageMatch7aurora

novell suse_manager_retail_branch_serverMatch4.3aurora

novell suse_manager_proxyMatch4.3aurora

novell suse_manager_serverMatch4.3aurora

novell suse_enterprise_storageMatch7.1aurora

daniel_stenberg curlRange<7.86.0aurora

novell suse_linux_enterprise_serverMatch15-ltss

novell opensuse_leapMatch15.3

novell opensuse_leapMatch15.4

red_hat red_hat_enterprise_linuxMatch9

novell opensuse_leap_microMatch5.2

canonical ubuntuMatch22.10

Source	Link
curl	www.curl.se/docs/CVE-2022-32221.html
github	www.github.com/curl/curl/issues/9507
github	www.github.com/curl/curl/commit/a64e3e59938abd7d667e4470a18072a24d7e9de9
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-32221
suse	www.suse.com/security/cve/CVE-2022-32221.html
access	www.access.redhat.com/security/cve/CVE-2022-32221
ubuntu	www.ubuntu.com/security/notices/USN-5702-1
ubuntu	www.ubuntu.com/security/notices/USN-5702-2
cve	www.cve.omprussia.ru/bb21
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/

01 Jun 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 39.8

CVSS 210

EPSS0.04325