CVE-2021-22901

🗓️ 11 Jun 2021 15:49:38Reported by Debian Security Bug TrackerType

curl 7.75.0 through 7.76.1 use-after-free vulnerability in TLS 1.3 session ticket handling leading to potential remote code executio

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	1 Nov 202120:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera High-Speed Transfer Server, Endpoint, and Desktop Client are vulnerable to libcurl vulnerabilities (CVE-2021-22901, CVE-2021-22898)	30 Sep 202120:07	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (V2.103.000.051) and Modules	10 Aug 202120:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	17 Oct 202400:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
FreeBSD	MySQL -- Multiple vulnerabilities	20 Jul 202100:00	–	freebsd
ATTACKERKB	CVE-2021-22901	11 Jun 202116:15	–	attackerkb
AlpineLinux	CVE-2021-22901	11 Jun 202115:49	–	alpinelinux
ArchLinux	[ASA-202106-4] curl: multiple issues	1 Jun 202100:00	–	archlinux

11 Jun 2021 15:49Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 3.18.1

EPSS0.60122