CVE-2021-22925

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://seclists.org/fulldisclosure/2021/Sep/39	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/40	Mailing List Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	Patch Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf	Third Party Advisory
https://hackerone.com/reports/1223882	Exploit Issue Tracking Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202212-01	Third Party Advisory
https://security.netapp.com/advisory/ntap-20210902-0003/	Third Party Advisory
https://support.apple.com/kb/HT212804	Third Party Advisory
https://support.apple.com/kb/HT212805	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	Patch Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/39	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/40	Mailing List Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	Patch Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf	Third Party Advisory
https://hackerone.com/reports/1223882	Exploit Issue Tracking Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/	Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202212-01	Third Party Advisory
https://security.netapp.com/advisory/ntap-20210902-0003/	Third Party Advisory
https://support.apple.com/kb/HT212804	Third Party Advisory
https://support.apple.com/kb/HT212805	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html	Patch Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:a:netapp:cloud_backup:-:::::::*
	cpe:2.3:a:netapp:clustered_data_ontap:-:::::::*
	cpe:2.3:a:netapp:hci_management_node:-:::::::*
	cpe:2.3:a:netapp:solidfire:-:::::::*

Configuration 4 (hide)

OR	cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004::::::
	cpe:2.3:o:apple:macos:11.0:::::::*
	cpe:2.3:o:apple:macos:11.0.1:::::::*
	cpe:2.3:o:apple:macos:11.1:::::::*
	cpe:2.3:o:apple:macos:11.1.0:::::::*
	cpe:2.3:o:apple:macos:11.2:::::::*
	cpe:2.3:o:apple:macos:11.2.1:::::::*
	cpe:2.3:o:apple:macos:11.3:::::::*
	cpe:2.3:o:apple:macos:11.3.1:::::::*
	cpe:2.3:o:apple:macos:11.4:::::::*
	cpe:2.3:o:apple:macos:11.5:::::::*

Configuration 5 (hide)

OR	cpe:2.3:a:oracle:mysql_server::::::::
	cpe:2.3:a:oracle:mysql_server::::::::
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:::::::*
	cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:::::::*

Configuration 6 (hide)

OR	cpe:2.3:a:siemens:sinec_infrastructure_network_services::::::::
	cpe:2.3:a:siemens:sinema_remote_connect_server::::::::

Configuration 7 (hide)

AND

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 14 (hide)

OR	cpe:2.3:a:splunk:universal_forwarder::::::::
	cpe:2.3:a:splunk:universal_forwarder::::::::
	cpe:2.3:a:splunk:universal_forwarder:9.1.0:::::::*

History

21 Nov 2024, 05:50

Type	Values Removed	Values Added
References	~~() http://seclists.org/fulldisclosure/2021/Sep/39 - Mailing List, Third Party Advisory~~	() http://seclists.org/fulldisclosure/2021/Sep/39 - Mailing List, Third Party Advisory
References	~~() http://seclists.org/fulldisclosure/2021/Sep/40 - Mailing List, Third Party Advisory~~	() http://seclists.org/fulldisclosure/2021/Sep/40 - Mailing List, Third Party Advisory
References	~~() https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - Patch, Third Party Advisory~~	() https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - Patch, Third Party Advisory
References	~~() https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - Third Party Advisory~~	() https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - Third Party Advisory
References	~~() https://hackerone.com/reports/1223882 - Exploit, Issue Tracking, Patch, Third Party Advisory~~	() https://hackerone.com/reports/1223882 - Exploit, Issue Tracking, Patch, Third Party Advisory
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/ - Mailing List, Third Party Advisory~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/ - Mailing List, Third Party Advisory
References	~~() https://security.gentoo.org/glsa/202212-01 - Third Party Advisory~~	() https://security.gentoo.org/glsa/202212-01 - Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20210902-0003/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20210902-0003/ - Third Party Advisory
References	~~() https://support.apple.com/kb/HT212804 - Third Party Advisory~~	() https://support.apple.com/kb/HT212804 - Third Party Advisory
References	~~() https://support.apple.com/kb/HT212805 - Third Party Advisory~~	() https://support.apple.com/kb/HT212805 - Third Party Advisory
References	~~() https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory~~	() https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory
References	~~() https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory~~	() https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory

27 Mar 2024, 15:11

Type	Values Removed	Values Added
CPE		cpe:2.3:a:splunk:universal_forwarder:::::::: cpe:2.3:a:splunk:universal_forwarder:9.1.0:::::::*
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/ -~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/ - Mailing List, Third Party Advisory
First Time		Splunk Splunk universal Forwarder

07 Nov 2023, 03:30

Type	Values Removed	Values Added
References	{'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/', 'name': 'FEDORA-2021-5d21b90a30', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/ -

Information

Published : 2021-08-05 21:15

Updated : 2024-11-21 05:50

NVD link : CVE-2021-22925

Mitre link : CVE-2021-22925

CVE.ORG link : CVE-2021-22925

JSON object : View

Products Affected

splunk

universal_forwarder

netapp

h700e_firmware
h500s_firmware
cloud_backup
h500s
h700s
clustered_data_ontap
h500e_firmware
h410s_firmware
h700e
h700s_firmware
h300s
h300e_firmware
hci_management_node
h410s
h500e
solidfire
h300s_firmware
h300e

oracle

mysql_server
peoplesoft_enterprise_peopletools

siemens

sinec_infrastructure_network_services
sinema_remote_connect_server

fedoraproject

fedora

haxx

curl

apple

macos
mac_os_x

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-908

Use of Uninitialized Resource

5.3 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2021-22925

5.3^/10

5.0^/10

Attach tags to `CVE-2021-22925`