Lucene search

CVE-2021-22890

🗓️ 01 Apr 2021 18:12:15Reported by hackeroneType

cve🔗 web.nvd.nist.gov👁 306 Views🌐 5 Media mentions

curl 7.63 to 7.75 allows MITM via malicious HTTPS proxy due to TLS 1.3 issu

Reporter	Title	Published	Views	Family All 80
Veracode	Man-in-the-Middle (MITM) Attack	1 Apr 202100:29	–	veracode
Tenable Nessus	FreeBSD : curl -- TLS 1.3 session ticket proxy host mixup (d10fc771-958f-11eb-9c34-080027f515ea)	14 Apr 202100:00	–	nessus
Tenable Nessus	Photon OS 4.0: Curl PHSA-2021-4.0-0007	7 Apr 202100:00	–	nessus
Tenable Nessus	Photon OS 3.0: Curl PHSA-2021-3.0-0215	7 Apr 202100:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2021:1006-1)	2 Apr 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-2060)	1 Jul 202100:00	–	nessus
Tenable Nessus	Fedora 33 : curl (2021-cab5c9befb)	19 Apr 202100:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : curl vulnerabilities (USN-4898-1)	1 Apr 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : curl (openSUSE-2021-510)	6 Apr 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-2049)	1 Jul 202100:00	–	nessus

Nvd

Vulners

Node

haxx libcurlRange7.63.0–7.75.0

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

Node

netapp hci_management_nodeMatch-

netapp solidfireMatch-

netapp hci_storage_nodeMatch-

Node

broadcom fabric_operating_systemMatch-

Node

debian debian_linuxMatch9.0

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Node

oracle communications_billing_and_revenue_managementMatch12.0.0.3.0

oracle essbaseMatch21.2

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "product": "https://github.com/curl/curl",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.63.0 to and including 7.75.0"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/1129529
oracle	www.oracle.com//security-alerts/cpujul2021.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
security	www.security.gentoo.org/glsa/202105-36
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
curl	www.curl.se/docs/CVE-2021-22890.html
security	www.security.netapp.com/advisory/ntap-20210521-0007/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Apr 2021 18:15Current

4.9Medium risk

Vulners AI Score4.9

CVSS24.3

CVSS33.7

EPSS0.003