Lucene search
UbuntuUSN-5079-1HistorySep 15, 2021 - 12:00 a.m.
curl vulnerabilities
2021-09-1500:00:00
ubuntu.com
125
Releases
- Ubuntu 21.04
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- curl - HTTP, HTTPS, and FTP client and client libraries
Details
It was discovered that curl incorrect handled memory when sending data to
an MQTT server. A remote attacker could use this issue to cause curl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2021-22945)
Patrick Monnerat discovered that curl incorrectly handled upgrades to TLS.
When receiving certain responses from servers, curl would continue without
TLS even when the option to require a successful upgrade to TLS was
specified. (CVE-2021-22946)
Patrick Monnerat discovered that curl incorrectly handled responses
received before STARTTLS. A remote attacker could possibly use this issue
to inject responses and intercept communications. (CVE-2021-22947)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.04 | noarch | libcurl3-gnutls | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | curl | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | curl-dbgsym | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl3-gnutls-dbgsym | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl3-nss | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl3-nss-dbgsym | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl4 | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl4-dbgsym | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl4-doc | < 7.74.0-1ubuntu2.3 | UNKNOWN |
| Ubuntu | 21.04 | noarch | libcurl4-gnutls-dev | < 7.74.0-1ubuntu2.3 | UNKNOWN |
Related
osv
osv
curl vulnerabilities
2021-09-15 11:11:13
curl vulnerabilities
2021-09-21 11:34:54
Moderate: curl security update
2021-11-02 07:49:01
nessus
nessus
Photon OS 3.0: Curl PHSA-2021-3.0-0301
2021-09-21 00:00:00
Photon OS 2.0: Curl PHSA-2021-2.0-0392
2021-09-21 00:00:00
Photon OS 4.0: Curl PHSA-2021-4.0-0102
2021-09-21 00:00:00
photon
photon
slackware
slackware
[slackware-security] curl
2021-09-16 03:11:12
amazon
amazon
Medium: curl
2021-12-08 02:22:00
Medium: curl
2021-11-10 22:13:00
openvas
openvas
Ubuntu: Security Advisory (USN-5079-1)
2021-09-16 00:00:00
Slackware: Security Advisory (SSA:2021-258-01)
2022-04-21 00:00:00
Mageia: Security Advisory (MGASA-2021-0438)
2022-01-28 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2021-09-21 00:00:00
curl regression
2021-09-21 00:00:00
curl vulnerabilities
2021-09-15 00:00:00
cloudfoundry
cloudfoundry
USN-5079-1: curl vulnerabilities | Cloud Foundry
2021-10-28 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2021-09-23 07:49:29
fedora
fedora
[SECURITY] Fedora 35 Update: curl-7.79.1-1.fc35
2021-11-03 01:12:29
[SECURITY] Fedora 34 Update: curl-7.76.1-12.fc34
2021-09-21 15:33:29
[SECURITY] Fedora 33 Update: curl-7.71.1-11.fc33
2021-10-02 01:10:15
freebsd
freebsd
cURL -- Multiple vulnerabilities
2021-09-15 00:00:00
MySQL -- Multiple vulnerabilities
2022-01-18 00:00:00
suse
suse
Security update for curl (moderate)
2021-10-06 00:00:00
Security update for curl (moderate)
2021-10-18 00:00:00
ibm
ibm
rocky
rocky
curl security update
2021-11-02 07:49:01
oraclelinux
oraclelinux
curl security update
2021-11-02 00:00:00
almalinux
almalinux
Moderate: curl security update
2021-11-02 07:49:01
redhat
redhat
(RHSA-2022:0635) Moderate: curl security update
2022-02-22 14:34:54
(RHSA-2021:4059) Moderate: curl security update
2021-11-02 07:49:01
(RHSA-2022:1354) Moderate: rh-dotnet31-curl security update
2022-04-13 13:42:42
debian
debian
[SECURITY] [DLA 2773-1] curl security update
2021-09-30 22:30:24
[SECURITY] [DSA 5197-1] curl security update
2022-08-01 17:15:10
[SECURITY] [DLA 3085-1] curl security update
2022-08-28 23:01:14
cvelist
cvelist
redhatcve
redhatcve
ubuntucve
ubuntucve
cbl_mariner
cbl_mariner
CVE-2021-22945 affecting package curl 7.76.0-9
2021-10-05 03:00:51
CVE-2021-22945 affecting package curl for versions less than 7.82.0-1
2022-04-09 06:51:45
CVE-2021-22947 affecting package curl 7.76.0-9
2021-10-05 03:00:51
veracode
veracode
Denial Of Service (DoS)
2021-09-17 21:34:21
Man-In-The-Middle Attack (MitM)
2021-09-17 21:34:37
Denial Of Service (DoS)
2021-09-17 21:34:33
hackerone
hackerone
curl: CVE-2021-22945: UAF and double-free in MQTT sending
2021-07-19 18:20:56
curl: CVE-2021-22946: Protocol downgrade required TLS bypassed
2021-09-09 00:34:37
curl: CVE-2021-22947: STARTTLS protocol injection via MITM
2021-09-09 14:00:44
alpinelinux
alpinelinux
cve
cve
prion
prion
debiancve
debiancve
mscve
mscve
Open Source Curl Remote Code Execution Vulnerability
2022-01-11 08:00:00
krebs
krebs
‘Wormable’ Flaw Leads January 2022 Patch Tuesday
2022-01-11 22:18:55
gentoo
gentoo
curl: Multiple Vulnerabilities
2022-12-19 00:00:00
malwarebytes
malwarebytes
hivepro
hivepro
Microsoft Patch Tuesday fixes critical zero-days along with 97 other flaws
2022-01-12 07:30:07
thn
thn
threatpost
threatpost
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
2022-01-11 21:54:57
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens RUGGEDCOM ROX
2023-07-13 12:00:00
apple
apple
About the security content of macOS Monterey 12.3
2022-03-14 00:00:00
mskb
mskb
January 11, 2022—KB5009566 (OS Build 22000.434)
2022-01-11 08:00:00
January 11, 2022—KB5009545 (OS Build 18363.2037)
2022-01-11 08:00:00