CVE-2021-22946

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.

• Apple macOS

  OS
  Apple
  < 12.3

• Debian

  OS
  Debian
  10.011.09.0

• Fedora Project Fedora

  OS
  Fedoraproject
  3335

• Haxx Curl

  APP
  Haxx
  7.20.0 – 7.79.0 (excl.)

• Netapp Cloud Backup

  APP
  Netapp
  all versions

• Netapp Clustered Data Ontap

  APP
  Netapp
  all versions

• Netapp H300e

  HW
  Netapp
  all versions

• Netapp H300e Firmware

  OS
  Netapp
  all versions

• Netapp H300s

  HW
  Netapp
  all versions

• Netapp H300s Firmware

  OS
  Netapp
  all versions

• Netapp H410s

  HW
  Netapp
  all versions

• Netapp H410s Firmware

  OS
  Netapp
  all versions

• Netapp H500e

  HW
  Netapp
  all versions

• Netapp H500e Firmware

  OS
  Netapp
  all versions

• Netapp H500s

  HW
  Netapp
  all versions

• Netapp H500s Firmware

  OS
  Netapp
  all versions

• Netapp H700e

  HW
  Netapp
  all versions

• Netapp H700e Firmware

  OS
  Netapp
  all versions

• Netapp H700s

  HW
  Netapp
  all versions

• Netapp H700s Firmware

  OS
  Netapp
  all versions

• Netapp Oncommand Insight

  APP
  Netapp
  all versions

• Netapp Oncommand Workflow Automation

  APP
  Netapp
  all versions

• Netapp Snapcenter

  APP
  Netapp
  all versions

• Netapp Solidfire Baseboard Management Controller

  HW
  Netapp
  all versions

• Netapp Solidfire Baseboard Management Controller Firmware

  OS
  Netapp
  all versions

• Oracle Commerce Guided Search

  APP
  Oracle
  11.3.2

• Oracle Communications Cloud Native Core Binding Support Function

  APP
  Oracle
  1.11.022.1.3

• Oracle Communications Cloud Native Core Console

  APP
  Oracle
  22.2.0

• Oracle Communications Cloud Native Core Network Function Cloud Native Environment

  APP
  Oracle
  1.10.0

• Oracle Communications Cloud Native Core Network Repository Function

  APP
  Oracle
  1.15.01.15.122.1.022.2.0