CVE-2021-22898 Information disclosure in https://github.com/curl/curl
An attacker can read sensitive internal memory data from a client using curl's telnet option due to uninitialized stack buffer exposure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-22898?
CVE-2021-22898 is a low-severity vulnerability in Debian Debian Linux, published on 11 Jun 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
Which versions are affected by CVE-2021-22898?
It affects 12 products.
Linux distribution packages (14)
curl SUSE:Linux Enterprise Micro 5.0 | All versions | 7.66.0-4.17.1 |
curl SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 7.66.0-4.17.1 |
curl SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 7.66.0-4.17.1 |
curl SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 7.37.0-70.66.1 |
curl SUSE:Linux Enterprise Server 11 SP4-LTSS | All versions | 7.37.0-70.66.1 |
curl-openssl1 SUSE:Linux Enterprise Server 11-SECURITY | All versions | 7.37.0-70.63.1 |
curl-openssl1 SUSE:Linux Enterprise Server 11-SECURITY | All versions | 7.37.0-70.66.1 |
curl SUSE:Linux Enterprise Server 12 SP5 | All versions | 7.60.0-11.18.1 |
curl SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 7.60.0-11.18.1 |
curl SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 7.60.0-11.18.1 |
curl openSUSE:Leap 15.2 | All versions | 7.66.0-lp152.3.18.1 |
curl-mini openSUSE:Leap 15.2 | All versions | 7.66.0-lp152.3.18.1 |
curl openSUSE:Leap 15.3 | All versions | 7.66.0-4.17.1 |
curl-mini openSUSE:Leap 15.3 | All versions | 7.66.0-4.17.1 |
Products include Debian Debian Linux, Fedoraproject Fedora, Haxx Curl, Oracle Communications Cloud Native Core Binding Support Function, Oracle Communications Cloud Native Core Network Function Cloud Native Environment, Oracle Communications Cloud Native Core Network Repository Function and 6 more.
How do I fix CVE-2021-22898?
Upgrade to a fixed version.
Is CVE-2021-22898 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-22898 exists.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2021-22898, AZL-6359, CLEANSTART-2026-QK91479, CLSA-2021-1632261872, CLSA-2021-1635459182, CURL-CVE-2021-22898 and 11 more.