Vulnerability Details : CVE-2021-22945

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
Publish Date : 2021-09-23 Last Update Date : 2022-12-22

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	5.8
Confidentiality Impact	Partial (There is considerable informational disclosure.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	Partial (There is reduced performance or interruptions in resource availability.)
Access Complexity	Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)
CWE ID	415

- Products Affected By CVE-2021-22945

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	OS	Apple	Macos	*	*	*	*	Version Details Vulnerabilities
2	OS	Debian	Debian Linux	11.0	*	*	*	Version Details Vulnerabilities
3	OS	Fedoraproject	Fedora	33	*	*	*	Version Details Vulnerabilities
4	OS	Fedoraproject	Fedora	35	*	*	*	Version Details Vulnerabilities
5	Application	Haxx	Libcurl	*	*	*	*	Version Details Vulnerabilities
6	Application	Netapp	Cloud Backup	-	*	*	*	Version Details Vulnerabilities
7	Application	Netapp	Clustered Data Ontap	-	*	*	*	Version Details Vulnerabilities
8	Application	Oracle	Mysql Server	*	*	*	*	Version Details Vulnerabilities
9	Application	Siemens	Sinec Ins	*	*	*	*	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Apple	Macos	1
Debian	Debian Linux	1
Fedoraproject	Fedora	2
Haxx	Libcurl	1
Netapp	Cloud Backup	1
Netapp	Clustered Data Ontap	1
Oracle	Mysql Server	1
Siemens	Sinec Ins	1

- References For CVE-2021-22945

https://security.gentoo.org/glsa/202212-01
GENTOO GLSA-202212-01

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf CONFIRM

https://www.debian.org/security/2022/dsa-5197
DEBIAN DSA-5197

https://hackerone.com/reports/1269242

https://lists.fedoraproject.org/archives/list/[email protected]/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
FEDORA FEDORA-2021-1d24845e93

https://support.apple.com/kb/HT213183 CONFIRM

https://www.oracle.com/security-alerts/cpuoct2021.html

http://seclists.org/fulldisclosure/2022/Mar/29
FULLDISC 20220314 APPLE-SA-2022-03-14-4 macOS Monterey 12.3

https://security.netapp.com/advisory/ntap-20211029-0003/ CONFIRM

https://lists.fedoraproject.org/archives/list/[email protected]/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
FEDORA FEDORA-2021-fc96a3a749

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *
Vulnerability is valid if product versions listed below are used 0
Debian Debian Linux 11.0 * * * Siemens Sinec Ins * * * * Apple Macos * * * * Oracle Mysql Server * * * * Netapp Clustered Data Ontap * * * Netapp Cloud Backup * * * Fedoraproject Fedora 35 * * * Fedoraproject Fedora 33 * * * Haxx Libcurl * * * *	Netapp H300e * * * Netapp H300e Firmware * * * Netapp H300s * * * Netapp H300s Firmware * * * Netapp H410s * * * Netapp H410s Firmware * * * Netapp H500e * * * Netapp H500e Firmware * * * Netapp H500s * * * Netapp H500s Firmware * * * Netapp H700e * * * Netapp H700e Firmware * * * Netapp H700s * * * Netapp H700s Firmware * * * Netapp Solidfire Baseboard Management Controller * * * Netapp Solidfire Baseboard Management Controller Firmware * * *

- Metasploit Modules Related To CVE-2021-22945

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)