CRITICAL✓ PATCH🇬🇧 English

CVE-2021-22945

CVSS 9.1v3.1pub. 2021-09-23upd. 2025-06-09

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Apple macOS
OS
Apple
12.0.0 – 12.3 (bez)
Debian
OS
Debian
11.0
Fedora Project Fedora
OS
Fedoraproject
3335
Haxx Libcurl
APP
Haxx
7.73.0 – 7.78.0
Netapp Cloud Backup
APP
Netapp
wszystkie wersje
Netapp Clustered Data Ontap
APP
Netapp
wszystkie wersje
Netapp H300e
HW
Netapp
wszystkie wersje
Netapp H300e Firmware
OS
Netapp
wszystkie wersje
Netapp H300s
HW
Netapp
wszystkie wersje
Netapp H300s Firmware
OS
Netapp
wszystkie wersje
Netapp H410s
HW
Netapp
wszystkie wersje
Netapp H410s Firmware
OS
Netapp
wszystkie wersje
Netapp H500e
HW
Netapp
wszystkie wersje
Netapp H500e Firmware
OS
Netapp
wszystkie wersje
Netapp H500s
HW
Netapp
wszystkie wersje
Netapp H500s Firmware
OS
Netapp
wszystkie wersje
Netapp H700e
HW
Netapp
wszystkie wersje
Netapp H700e Firmware
OS
Netapp
wszystkie wersje
Netapp H700s
HW
Netapp
wszystkie wersje
Netapp H700s Firmware
OS
Netapp
wszystkie wersje
Netapp Solidfire Baseboard Management Controller
HW
Netapp
wszystkie wersje
Netapp Solidfire Baseboard Management Controller Firmware
OS
Netapp
wszystkie wersje
Oracle MySQL Server
APP
Oracle
8.0.0 – 8.0.265.7.0 – 5.7.35
Siemens Sinec Ins
APP
Siemens
< 1.0.1.1
Splunk Universal Forwarder
APP
Splunk
9.1.08.2.0 – 8.2.12 (bez)9.0.0 – 9.0.6 (bez)