CVE-2021-22946

CWE-325CWE-319 — Cleartext Transmission20 documents11 sources
Severity
7.5HIGH
EPSS
0.1%
top 76.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
17
Apple MacosHaxx CurlSiemens Sinec Infrastructure Network Services+14 more
Timeline
PublishedSep 29
Latest updateOct 15

Description

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages17 packages

▶NVDhaxx/curl7.20.0 — 7.79.0
▶Debiancurl< 7.74.0-1.3+deb11u2+3
▶Ubuntucurl< 7.35.0-1ubuntu2.20+esm8+3
▶NVDoracle/mysql_server5.7.0 — 5.7.35+1
▶CVEListV5https://github.com/curl/curlcurl 7.20.0 to and including 7.78.0

Also affects: Debian Linux 10.0, 11.0, 9.0, Fedora 33, 35

Patches

Patch: cert-portal.siemens.com ↗Patch: hackerone.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

7
GHSA
GHSA-3cmq-42w4-c529: A user can tell curl >= 7↗2022-05-24
▶
OSV
CVE-2021-22946: A user can tell curl >= 7↗2021-09-29
▶
CVEList
CVE-2021-22946: A user can tell curl >= 7↗2021-09-29
▶
OSV
curl regression↗2021-09-21
▶
OSV
curl vulnerabilities↗2021-09-21
▶

📋Vendor Advisories

11
Oracle
Oracle Oracle Essbase Risk Matrix: Build (cURL) — CVE-2021-22946↗2022-10-15
▶
Oracle
Oracle Oracle Commerce Risk Matrix: Framework, Experience Manager (cURL) — CVE-2021-22946↗2022-07-15
▶
Oracle
Oracle Oracle Communications Risk Matrix: CNC BSF (cURL) — CVE-2021-22946↗2022-04-15
▶
Apple
CVE-2021-22946: macOS Monterey 12.3↗2022-03-14
▶
Oracle
Oracle Oracle MySQL Risk Matrix: Server: Compiling (cURL) — CVE-2021-22946↗2022-01-15
▶

💬Community

1
HackerOne
CVE-2021-22946: Protocol downgrade required TLS bypassed↗2021-09-24
▶