CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-22945

CVSS 9.1v3.1pub. 2021-09-23upd. 2025-06-09

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

  • Apple macOS

    OS
    Apple
    12.0.0 – 12.3 (excl.)

  • Debian

    OS
    Debian
    11.0

  • Fedora Project Fedora

    OS
    Fedoraproject
    3335

  • Haxx Libcurl

    APP
    Haxx
    7.73.0 – 7.78.0

  • Netapp Cloud Backup

    APP
    Netapp
    all versions

  • Netapp Clustered Data Ontap

    APP
    Netapp
    all versions

  • Netapp H300e

    HW
    Netapp
    all versions

  • Netapp H300e Firmware

    OS
    Netapp
    all versions

  • Netapp H300s

    HW
    Netapp
    all versions

  • Netapp H300s Firmware

    OS
    Netapp
    all versions

  • Netapp H410s

    HW
    Netapp
    all versions

  • Netapp H410s Firmware

    OS
    Netapp
    all versions

  • Netapp H500e

    HW
    Netapp
    all versions

  • Netapp H500e Firmware

    OS
    Netapp
    all versions

  • Netapp H500s

    HW
    Netapp
    all versions

  • Netapp H500s Firmware

    OS
    Netapp
    all versions

  • Netapp H700e

    HW
    Netapp
    all versions

  • Netapp H700e Firmware

    OS
    Netapp
    all versions

  • Netapp H700s

    HW
    Netapp
    all versions

  • Netapp H700s Firmware

    OS
    Netapp
    all versions

  • Netapp Solidfire Baseboard Management Controller

    HW
    Netapp
    all versions

  • Netapp Solidfire Baseboard Management Controller Firmware

    OS
    Netapp
    all versions

  • Oracle MySQL Server

    APP
    Oracle
    8.0.0 – 8.0.265.7.0 – 5.7.35

  • Siemens Sinec Ins

    APP
    Siemens
    < 1.0.1.1

  • Splunk Universal Forwarder

    APP
    Splunk
    9.1.08.2.0 – 8.2.12 (excl.)9.0.0 – 9.0.6 (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-65400CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelniania w Screen Sharing na macOS

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓same product

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)