medium
4.3
CWE
706 20 295
Advisory Published
CVE Published
Updated

CVE-2021-22924: Input Validation

First published: Mon Jul 12 2021(Updated: )

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.

Credit: support@hackerone.com support@hackerone.com

Affected SoftwareAffected VersionHow to fix
redhat/rh-dotnet31-curl<0:7.61.1-22.el7_9
0:7.61.1-22.el7_9
redhat/curl<0:7.61.1-18.el8_4.1
0:7.61.1-18.el8_4.1
debian/curl<=7.64.0-4+deb10u2
7.64.0-4+deb10u7
7.74.0-1.3+deb11u9
7.74.0-1.3+deb11u10
7.88.1-10+deb12u3
7.88.1-10+deb12u4
8.4.0-2
redhat/curl<7.78.0
7.78.0
Haxx Libcurl>=7.10.4<7.77.0
Fedoraproject Fedora=33
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Netapp Cloud Backup
NetApp Clustered Data ONTAP
Netapp Solidfire \& Hci Management Node
Netapp Solidfire Baseboard Management Controller Firmware
Oracle Mysql Server>=5.7.0<=5.7.36
Oracle Mysql Server>=8.0.0<=8.0.26
Oracle PeopleSoft Enterprise PeopleTools=8.57
Oracle PeopleSoft Enterprise PeopleTools=8.58
Oracle PeopleSoft Enterprise PeopleTools=8.59
Siemens Sinec Infrastructure Network Services<1.0.1.1
Siemens SINEMA Remote Connect Server<3.1
Siemens Logo\! Cmr2040 Firmware
Siemens Logo\! Cmr2040
Siemens Logo\! Cmr2020 Firmware
Siemens Logo\! Cmr2020
Siemens Ruggedcomrm 1224 Lte Firmware<7.1
Siemens Ruggedcomrm 1224 Lte
Siemens Scalance M804pb Firmware<7.1
Siemens Scalance M804pb
Siemens Scalance M812-1 Firmware<7.1
Siemens Scalance M812-1
Siemens Scalance M816-1 Firmware<7.1
Siemens Scalance M816-1
Siemens Scalance M826-2 Firmware<7.1
Siemens Scalance M826-2
Siemens Scalance M874-2 Firmware<7.1
Siemens Scalance M874-2
Siemens Scalance M874-3 Firmware<7.1
Siemens Scalance M874-3
Siemens Scalance M876-3 Firmware<7.1
Siemens Scalance M876-3
Siemens Scalance M876-4 Firmware<7.1
Siemens Scalance M876-4
Siemens Scalance Mum856-1 Firmware<7.1
Siemens Scalance Mum856-1
Siemens Scalance S615 Firmware<7.1
Siemens SCALANCE S615
Siemens Simatic Cp 1543-1 Firmware<3.0.22
Siemens Simatic Cp 1543-1
Siemens Simatic Cp 1545-1 Firmware<1.1
Siemens SIMATIC CP 1545-1
Siemens Simatic Rtu3010c Firmware<5.0.14
Siemens Simatic Rtu3010c
Siemens Simatic Rtu3030c Firmware<5.0.14
Siemens Simatic Rtu3030c
Siemens Simatic Rtu3031c Firmware<5.0.14
Siemens Simatic Rtu3031c
Siemens Simatic Rtu 3041c Firmware<5.0.14
Siemens Simatic Rtu 3041c
Siemens Sinema Remote Connect<3.1
Siemens Siplus Net Cp 1543-1 Firmware<3.0.22
Siemens Siplus Net Cp 1543-1
All of
Siemens Logo\! Cmr2040 Firmware
Siemens Logo\! Cmr2040
All of
Siemens Logo\! Cmr2020 Firmware
Siemens Logo\! Cmr2020
All of
Siemens Ruggedcomrm 1224 Lte Firmware<7.1
Siemens Ruggedcomrm 1224 Lte
All of
Siemens Scalance M804pb Firmware<7.1
Siemens Scalance M804pb
All of
Siemens Scalance M812-1 Firmware<7.1
Siemens Scalance M812-1
All of
Siemens Scalance M816-1 Firmware<7.1
Siemens Scalance M816-1
All of
Siemens Scalance M826-2 Firmware<7.1
Siemens Scalance M826-2
All of
Siemens Scalance M874-2 Firmware<7.1
Siemens Scalance M874-2
All of
Siemens Scalance M874-3 Firmware<7.1
Siemens Scalance M874-3
All of
Siemens Scalance M876-3 Firmware<7.1
Siemens Scalance M876-3
All of
Siemens Scalance M876-4 Firmware<7.1
Siemens Scalance M876-4
All of
Siemens Scalance Mum856-1 Firmware<7.1
Siemens Scalance Mum856-1
All of
Siemens Scalance S615 Firmware<7.1
Siemens SCALANCE S615
All of
Siemens Simatic Cp 1543-1 Firmware<3.0.22
Siemens Simatic Cp 1543-1
All of
Siemens Simatic Cp 1545-1 Firmware<1.1
Siemens SIMATIC CP 1545-1
All of
Siemens Simatic Rtu3010c Firmware<5.0.14
Siemens Simatic Rtu3010c
All of
Siemens Simatic Rtu3030c Firmware<5.0.14
Siemens Simatic Rtu3030c
All of
Siemens Simatic Rtu3031c Firmware<5.0.14
Siemens Simatic Rtu3031c
All of
Siemens Simatic Rtu 3041c Firmware<5.0.14
Siemens Simatic Rtu 3041c
All of
Siemens Siplus Net Cp 1543-1 Firmware<3.0.22
Siemens Siplus Net Cp 1543-1
Splunk Universal Forwarder>=8.2.0<8.2.12
Splunk Universal Forwarder>=9.0.0<9.0.6
Splunk Universal Forwarder=9.1.0

Remedy

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Remedy

https://hackerone.com/reports/1223565

Remedy

https://www.oracle.com/security-alerts/cpujan2022.html

Remedy

https://www.oracle.com/security-alerts/cpuoct2021.html

Remedy

This flaw can be mitigated by upgrading the affected curl utility to version 7.78.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203