CVE-2021-22897

creationtimestamp| type| source ---|---|--- 2024-04-25 05:46:52+00:00| seen| https://t.me/criticalbug/1064 2024-08-27 17:01:09+00:00| published-proof-of-concept| https://t.me/criticalbug/1476...

SUSE CVE-2021-22897

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...