CVE-2021-22945 Use after free in https://github.com/curl/curl
A use-after-free flaw in libcurl's MQTT implementation allows attackers to cause crashes or potentially execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-22945?
CVE-2021-22945 is a critical use after free vulnerability in Apple Macos, published on 23 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
Weakness: CWE-415
Which versions are affected by CVE-2021-22945?
It affects 17 products.
Products include Apple Macos, Debian Debian Linux, Fedoraproject Fedora, Haxx Libcurl, Netapp Cloud Backup, Netapp Clustered Data Ontap and 11 more.
How do I fix CVE-2021-22945?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2021-22945 being exploited?
There is no known exploitation of CVE-2021-22945 in the wild and no public exploit code.
Other vulnerabilities in Apple Macos
Sources
Also known as ALPINE-CVE-2021-22945, AZL-6368, CLEANSTART-2026-YT27832, CURL-CVE-2021-22945, DEBIAN-CVE-2021-22945, GHSA-22mx-9r92-42g8 and 2 more.