When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2022/Mar/29 | Mailing List Third Party Advisory |
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf | Patch Third Party Advisory |
https://hackerone.com/reports/1269242 | Exploit Patch Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ | Mailing List Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202212-01 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20211029-0003/ | Third Party Advisory |
https://support.apple.com/kb/HT213183 | Third Party Advisory |
https://www.debian.org/security/2022/dsa-5197 | Third Party Advisory |
https://www.oracle.com/security-alerts/cpuoct2021.html | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
AND |
|
Configuration 13 (hide)
|
Configuration 14 (hide)
|
Configuration 15 (hide)
|
Configuration 16 (hide)
|
History
27 Mar 2024, 15:04
Type | Values Removed | Values Added |
---|---|---|
First Time |
Splunk
Splunk universal Forwarder |
|
CPE | cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:* |
|
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/ - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/ - Mailing List, Third Party Advisory |
07 Nov 2023, 03:30
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-09-23 13:15
Updated : 2024-03-27 15:04
NVD link : CVE-2021-22945
Mitre link : CVE-2021-22945
CVE.ORG link : CVE-2021-22945
JSON object : View
Products Affected
netapp
- h410s
- h500s
- h500e_firmware
- h300e
- h500e
- h500s_firmware
- solidfire_baseboard_management_controller
- h700e_firmware
- h410s_firmware
- h700e
- h700s
- solidfire_baseboard_management_controller_firmware
- clustered_data_ontap
- cloud_backup
- h300s_firmware
- h700s_firmware
- h300e_firmware
- h300s
debian
- debian_linux
splunk
- universal_forwarder
oracle
- mysql_server
fedoraproject
- fedora
siemens
- sinec_ins
haxx
- libcurl
apple
- macos
CWE
CWE-415
Double Free