CVE-2022-32206

🗓️ 07 Jul 2022 00:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 304 Views

CVE-2022-32206: Vulnerability in curl < 7.84.

Reporter	Title	Published	Views	Family All 209
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Copy Data Management (CVE-2022-32206, CVE-2022-32208)	7 Oct 202218:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability in libcurl (CVE-2022-32206)	4 Nov 202212:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libcURL affect IBM Rational ClearCase ( CVE-2022-42915, CVE-2022-42916, CVE-2022-32221, CVE-2022-35252, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207 )	31 Jan 202314:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module uses libcurl with multiple known vulnerabilities (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cURL libcurl ( CVE-2022-32208, CVE-2022-32206 )	29 Jul 202419:12	–	ibm

NVD

Vulners

Node

haxx curlRange<7.84.0

Node

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp clustered_data_ontapMatch-

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp solidfireMatch-

Node

netapp hci_compute_nodeMatch-

AND

netapp bootstrap_osMatch-

Node

netapp h300sMatch-

AND

netapp h300s_firmwareMatch-

Node

netapp h500sMatch-

AND

netapp h500s_firmwareMatch-

Node

netapp h700sMatch-

AND

netapp h700s_firmwareMatch-

Node

netapp h410sMatch-

AND

netapp h410s_firmwareMatch-

Node

siemens scalance_sc622-2cMatch-

AND

siemens scalance_sc622-2c_firmwareRange<3.0

Node

siemens scalance_sc626-2cMatch-

AND

siemens scalance_sc626-2c_firmwareRange<3.0

Node

siemens scalance_sc632-2c_firmwareRange<3.0

AND

siemens scalance_sc632-2cMatch-

Node

siemens scalance_sc636-2c_firmwareRange<3.0

AND

siemens scalance_sc636-2cMatch-

Node

siemens scalance_sc642-2c_firmwareRange<3.0

AND

siemens scalance_sc642-2cMatch-

Node

siemens scalance_sc646-2c_firmwareRange<3.0

AND

siemens scalance_sc646-2cMatch-

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "Fixed in 7.84.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213488
hackerone	www.hackerone.com/reports/1570651
openwall	www.openwall.com/lists/oss-security/2023/02/15/3
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00017.html
debian	www.debian.org/security/2022/dsa-5197
security	www.security.gentoo.org/glsa/202212-01
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
seclists	www.seclists.org/fulldisclosure/2022/Oct/41

05 May 2025 17:18Current

7.9High risk

Vulners AI Score7.9

CVSS 24.3

CVSS 3.16.5

EPSS0.03367

SSVC

CWE-770