CVE-2021-22945

Exploit

EPSS 0.35%
Published 23.09.2021 13:15:08
Last modified 09.06.2025 15:15:25
Source support@hackerone.com
Teams watchlist Login
Open Login

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

Affected products Warnungen 0 Metrics 4 CWE 1 References 13

Data is provided by the National Vulnerability Database (NVD)

Haxx ≫ Libcurl Version >= 7.73.0 <= 7.78.0

Fedoraproject ≫ Fedora Version33

Fedoraproject ≫ Fedora Version35

Netapp ≫ Cloud Backup Version-

Netapp ≫ Clustered Data Ontap Version-

Oracle ≫ Mysql Server Version >= 5.7.0 <= 5.7.35

Oracle ≫ Mysql Server Version >= 8.0.0 <= 8.0.26

Netapp ≫ H300s Firmware Version-

Netapp ≫ H300s Version-

Netapp ≫ H500s Firmware Version-

Netapp ≫ H500s Version-

Netapp ≫ H700s Firmware Version-

Netapp ≫ H700s Version-

Netapp ≫ H300e Firmware Version-

Netapp ≫ H300e Version-

Netapp ≫ H500e Firmware Version-

Netapp ≫ H500e Version-

Netapp ≫ H700e Firmware Version-

Netapp ≫ H700e Version-

Netapp ≫ H410s Firmware Version-

Netapp ≫ H410s Version-

Netapp ≫ Solidfire Baseboard Management Controller Firmware Version-

Netapp ≫ Solidfire Baseboard Management Controller Version-

Apple ≫ macOS Version >= 12.0.0 < 12.3

Siemens ≫ Sinec Ins Version < 1.0.1.1

Debian ≫ Debian Linux Version11.0

Splunk ≫ Universal Forwarder Version >= 8.2.0 < 8.2.12

Splunk ≫ Universal Forwarder Version >= 9.0.0 < 9.0.6

Splunk ≫ Universal Forwarder Version9.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.35%	0.571

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:N/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H