When sending data to an MQTT server libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again.

🗓️ 07 Oct 2021 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 5 Views

Libcurl up to 7.73.0 and 7.78.0 may reuse freed memory when sending data to an MQTT server.

Reporter	Title	Published	Views	Family All 296
IBM Security Bulletins	Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2021-22945)	4 Oct 202115:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	1 Nov 202120:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents	19 Sep 202222:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2021-22945)	22 Apr 202220:08	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2021-1724)	10 Dec 202100:00	–	nessus
Tenable Nessus	CentOS 9 : curl-7.76.1-12.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5197-1 : curl - security update	2 Aug 202200:00	–	nessus
Tenable Nessus	FreeBSD : cURL -- Multiple vulnerabilities (c9221ec9-17a2-11ec-b335-d4c9ef517024)	1 Oct 202100:00	–	nessus
Tenable Nessus	GLSA-202212-01 : curl: Multiple Vulnerabilities	18 Dec 202200:00	–	nessus

Vulners

Node

OR

microsoft cbl2_curl_7.82.0-1Range<7.82.0-1

microsoft cm1_curl_7.76.0-6Range<7.76.0-6

16 Dec 2021 08:00Current

7High risk

Vulners AI Score7

CVSS 25.8

CVSS 3.19.1

EPSS0.06677

SSVC

libcurl memory reuse freed memory data sending mqtt server