CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22946

A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-22946

Haxx » Curl » Version: 7.20.0

cpe:2.3:a:haxx:curl:7.20.0
Haxx » Curl » Version: 7.20.1

cpe:2.3:a:haxx:curl:7.20.1
Haxx » Curl » Version: 7.21.0

cpe:2.3:a:haxx:curl:7.21.0
Haxx » Curl » Version: 7.21.1

cpe:2.3:a:haxx:curl:7.21.1
Haxx » Curl » Version: 7.21.2

cpe:2.3:a:haxx:curl:7.21.2
Haxx » Curl » Version: 7.21.3

cpe:2.3:a:haxx:curl:7.21.3
Haxx » Curl » Version: 7.21.4

cpe:2.3:a:haxx:curl:7.21.4
Haxx » Curl » Version: 7.21.5

cpe:2.3:a:haxx:curl:7.21.5
Haxx » Curl » Version: 7.21.6

cpe:2.3:a:haxx:curl:7.21.6
Haxx » Curl » Version: 7.21.7

cpe:2.3:a:haxx:curl:7.21.7
Haxx » Curl » Version: 7.22.0

cpe:2.3:a:haxx:curl:7.22.0
Haxx » Curl » Version: 7.23.0

cpe:2.3:a:haxx:curl:7.23.0
Haxx » Curl » Version: 7.23.1

cpe:2.3:a:haxx:curl:7.23.1
Haxx » Curl » Version: 7.24.0

cpe:2.3:a:haxx:curl:7.24.0
Haxx » Curl » Version: 7.25.0

cpe:2.3:a:haxx:curl:7.25.0
Haxx » Curl » Version: 7.26.0

cpe:2.3:a:haxx:curl:7.26.0
Haxx » Curl » Version: 7.27.0

cpe:2.3:a:haxx:curl:7.27.0
Haxx » Curl » Version: 7.28.0

cpe:2.3:a:haxx:curl:7.28.0
Haxx » Curl » Version: 7.28.1

cpe:2.3:a:haxx:curl:7.28.1
Haxx » Curl » Version: 7.29.0

cpe:2.3:a:haxx:curl:7.29.0
Haxx » Curl » Version: 7.30.0

cpe:2.3:a:haxx:curl:7.30.0
Haxx » Curl » Version: 7.31.0

cpe:2.3:a:haxx:curl:7.31.0
Haxx » Curl » Version: 7.32.0

cpe:2.3:a:haxx:curl:7.32.0
Haxx » Curl » Version: 7.33.0

cpe:2.3:a:haxx:curl:7.33.0
Haxx » Curl » Version: 7.34.0

cpe:2.3:a:haxx:curl:7.34.0
Haxx » Curl » Version: 7.35.0

cpe:2.3:a:haxx:curl:7.35.0
Haxx » Curl » Version: 7.36.0

cpe:2.3:a:haxx:curl:7.36.0
Haxx » Curl » Version: 7.37.0

cpe:2.3:a:haxx:curl:7.37.0
Haxx » Curl » Version: 7.37.1

cpe:2.3:a:haxx:curl:7.37.1
Haxx » Curl » Version: 7.38.0

cpe:2.3:a:haxx:curl:7.38.0
Haxx » Curl » Version: 7.39.0

cpe:2.3:a:haxx:curl:7.39.0
Haxx » Curl » Version: 7.40.0

cpe:2.3:a:haxx:curl:7.40.0
Haxx » Curl » Version: 7.41.0

cpe:2.3:a:haxx:curl:7.41.0
Haxx » Curl » Version: 7.42.0

cpe:2.3:a:haxx:curl:7.42.0
Haxx » Curl » Version: 7.42.1

cpe:2.3:a:haxx:curl:7.42.1
Haxx » Curl » Version: 7.43.0

cpe:2.3:a:haxx:curl:7.43.0
Haxx » Curl » Version: 7.44.0

cpe:2.3:a:haxx:curl:7.44.0
Haxx » Curl » Version: 7.45.0

cpe:2.3:a:haxx:curl:7.45.0
Haxx » Curl » Version: 7.46.0

cpe:2.3:a:haxx:curl:7.46.0
Haxx » Curl » Version: 7.47.0

cpe:2.3:a:haxx:curl:7.47.0
Haxx » Curl » Version: 7.47.1

cpe:2.3:a:haxx:curl:7.47.1
Haxx » Curl » Version: 7.48.0

cpe:2.3:a:haxx:curl:7.48.0
Haxx » Curl » Version: 7.49.0

cpe:2.3:a:haxx:curl:7.49.0
Haxx » Curl » Version: 7.49.1

cpe:2.3:a:haxx:curl:7.49.1
Haxx » Curl » Version: 7.50.0

cpe:2.3:a:haxx:curl:7.50.0
Haxx » Curl » Version: 7.50.1

cpe:2.3:a:haxx:curl:7.50.1
Haxx » Curl » Version: 7.50.2

cpe:2.3:a:haxx:curl:7.50.2
Haxx » Curl » Version: 7.50.3

cpe:2.3:a:haxx:curl:7.50.3
Haxx » Curl » Version: 7.51.0

cpe:2.3:a:haxx:curl:7.51.0
Haxx » Curl » Version: 7.52.0

cpe:2.3:a:haxx:curl:7.52.0
Haxx » Curl » Version: 7.52.1

cpe:2.3:a:haxx:curl:7.52.1
Haxx » Curl » Version: 7.53.0

cpe:2.3:a:haxx:curl:7.53.0
Haxx » Curl » Version: 7.53.1

cpe:2.3:a:haxx:curl:7.53.1
Haxx » Curl » Version: 7.54.0

cpe:2.3:a:haxx:curl:7.54.0
Haxx » Curl » Version: 7.54.1

cpe:2.3:a:haxx:curl:7.54.1
Haxx » Curl » Version: 7.55.0

cpe:2.3:a:haxx:curl:7.55.0
Haxx » Curl » Version: 7.55.1

cpe:2.3:a:haxx:curl:7.55.1
Haxx » Curl » Version: 7.56.0

cpe:2.3:a:haxx:curl:7.56.0
Haxx » Curl » Version: 7.56.1

cpe:2.3:a:haxx:curl:7.56.1
Haxx » Curl » Version: 7.57.0

cpe:2.3:a:haxx:curl:7.57.0
Haxx » Curl » Version: 7.58.0

cpe:2.3:a:haxx:curl:7.58.0
Haxx » Curl » Version: 7.59.0

cpe:2.3:a:haxx:curl:7.59.0
Haxx » Curl » Version: 7.60.0

cpe:2.3:a:haxx:curl:7.60.0
Haxx » Curl » Version: 7.61.0

cpe:2.3:a:haxx:curl:7.61.0
Haxx » Curl » Version: 7.61.1

cpe:2.3:a:haxx:curl:7.61.1
Haxx » Curl » Version: 7.62.0

cpe:2.3:a:haxx:curl:7.62.0
Haxx » Curl » Version: 7.63.0

cpe:2.3:a:haxx:curl:7.63.0
Haxx » Curl » Version: 7.64.0

cpe:2.3:a:haxx:curl:7.64.0
Haxx » Curl » Version: 7.64.1

cpe:2.3:a:haxx:curl:7.64.1
Haxx » Curl » Version: 7.65.0

cpe:2.3:a:haxx:curl:7.65.0
Haxx » Curl » Version: 7.65.1

cpe:2.3:a:haxx:curl:7.65.1
Haxx » Curl » Version: 7.65.2

cpe:2.3:a:haxx:curl:7.65.2
Haxx » Curl » Version: 7.65.3

cpe:2.3:a:haxx:curl:7.65.3
Haxx » Curl » Version: 7.66.0

cpe:2.3:a:haxx:curl:7.66.0
Haxx » Curl » Version: 7.67.0

cpe:2.3:a:haxx:curl:7.67.0
Haxx » Curl » Version: 7.68.0

cpe:2.3:a:haxx:curl:7.68.0
Haxx » Curl » Version: 7.69.0

cpe:2.3:a:haxx:curl:7.69.0
Haxx » Curl » Version: 7.69.1

cpe:2.3:a:haxx:curl:7.69.1
Haxx » Curl » Version: 7.70.0

cpe:2.3:a:haxx:curl:7.70.0
Haxx » Curl » Version: 7.71.0

cpe:2.3:a:haxx:curl:7.71.0
Haxx » Curl » Version: 7.71.1

cpe:2.3:a:haxx:curl:7.71.1
Haxx » Curl » Version: 7.72.0

cpe:2.3:a:haxx:curl:7.72.0
Haxx » Curl » Version: 7.73.0

cpe:2.3:a:haxx:curl:7.73.0
Haxx » Curl » Version: 7.74.0

cpe:2.3:a:haxx:curl:7.74.0
Haxx » Curl » Version: 7.75.0

cpe:2.3:a:haxx:curl:7.75.0
Haxx » Curl » Version: 7.76.0

cpe:2.3:a:haxx:curl:7.76.0
Haxx » Curl » Version: 7.76.1

cpe:2.3:a:haxx:curl:7.76.1
Haxx » Curl » Version: 7.77.0

cpe:2.3:a:haxx:curl:7.77.0
Haxx » Curl » Version: 7.78.0

cpe:2.3:a:haxx:curl:7.78.0
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Clustered Data Ontap » Version: N/A

cpe:2.3:a:netapp:clustered_data_ontap:-
Netapp » Oncommand Insight » Version: N/A

cpe:2.3:a:netapp:oncommand_insight:-
Netapp » Oncommand Workflow Automation » Version: N/A

cpe:2.3:a:netapp:oncommand_workflow_automation:-
Netapp » Snapcenter » Version: N/A

cpe:2.3:a:netapp:snapcenter:-
Oracle » Commerce Guided Search » Version: 11.3.2

cpe:2.3:a:oracle:commerce_guided_search:11.3.2
Oracle » Communications Cloud Native Core Binding Support Function » Version: 1.11.0

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0
Oracle » Communications Cloud Native Core Binding Support Function » Version: 22.1.3

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3
Oracle » Communications Cloud Native Core Console » Version: 22.2.0

cpe:2.3:a:oracle:communications_cloud_native_core_console:22.2.0
Oracle » Communications Cloud Native Core Network Function Cloud Native Environment » Version: 1.10.0

cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0
Oracle » Communications Cloud Native Core Network Repository Function » Version: 1.15.0

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0
Oracle » Communications Cloud Native Core Network Repository Function » Version: 1.15.1

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1
Oracle » Communications Cloud Native Core Network Repository Function » Version: 22.1.0

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.0
Oracle » Communications Cloud Native Core Network Repository Function » Version: 22.2.0

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0
Oracle » Communications Cloud Native Core Network Slice Selection Function » Version: 1.8.0

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0
Oracle » Communications Cloud Native Core Security Edge Protection Proxy » Version: 22.1.1

cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1
Oracle » Communications Cloud Native Core Service Communication Proxy » Version: 1.15.0

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0
Oracle » Mysql Server » Version: 5.7.0

cpe:2.3:a:oracle:mysql_server:5.7.0
Oracle » Mysql Server » Version: 5.7.26

cpe:2.3:a:oracle:mysql_server:5.7.26
Oracle » Mysql Server » Version: 5.7.27

cpe:2.3:a:oracle:mysql_server:5.7.27
Oracle » Mysql Server » Version: 5.7.28

cpe:2.3:a:oracle:mysql_server:5.7.28
Oracle » Mysql Server » Version: 5.7.32

cpe:2.3:a:oracle:mysql_server:5.7.32
Oracle » Mysql Server » Version: 5.7.33

cpe:2.3:a:oracle:mysql_server:5.7.33
Oracle » Mysql Server » Version: 5.7.34

cpe:2.3:a:oracle:mysql_server:5.7.34
Oracle » Mysql Server » Version: 5.7.35

cpe:2.3:a:oracle:mysql_server:5.7.35
Oracle » Mysql Server » Version: 8.0.0

cpe:2.3:a:oracle:mysql_server:8.0.0
Oracle » Mysql Server » Version: 8.0.15

cpe:2.3:a:oracle:mysql_server:8.0.15
Oracle » Mysql Server » Version: 8.0.17

cpe:2.3:a:oracle:mysql_server:8.0.17
Oracle » Mysql Server » Version: 8.0.22

cpe:2.3:a:oracle:mysql_server:8.0.22
Oracle » Mysql Server » Version: 8.0.23

cpe:2.3:a:oracle:mysql_server:8.0.23
Oracle » Mysql Server » Version: 8.0.24

cpe:2.3:a:oracle:mysql_server:8.0.24
Oracle » Mysql Server » Version: 8.0.25

cpe:2.3:a:oracle:mysql_server:8.0.25
Oracle » Mysql Server » Version: 8.0.26

cpe:2.3:a:oracle:mysql_server:8.0.26
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.57

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.59

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59
Siemens » Sinec Infrastructure Network Services » Version: N/A

cpe:2.3:a:siemens:sinec_infrastructure_network_services:-
Siemens » Sinec Infrastructure Network Services » Version: 1.0.1

cpe:2.3:a:siemens:sinec_infrastructure_network_services:1.0.1
Splunk » Universal Forwarder » Version: 8.2.0

cpe:2.3:a:splunk:universal_forwarder:8.2.0
Splunk » Universal Forwarder » Version: 8.2.10

cpe:2.3:a:splunk:universal_forwarder:8.2.10
Splunk » Universal Forwarder » Version: 8.2.11

cpe:2.3:a:splunk:universal_forwarder:8.2.11
Splunk » Universal Forwarder » Version: 8.2.6

cpe:2.3:a:splunk:universal_forwarder:8.2.6
Splunk » Universal Forwarder » Version: 8.2.7

cpe:2.3:a:splunk:universal_forwarder:8.2.7
Splunk » Universal Forwarder » Version: 8.2.8

cpe:2.3:a:splunk:universal_forwarder:8.2.8
Splunk » Universal Forwarder » Version: 8.2.9

cpe:2.3:a:splunk:universal_forwarder:8.2.9
Splunk » Universal Forwarder » Version: 9.0.0

cpe:2.3:a:splunk:universal_forwarder:9.0.0
Splunk » Universal Forwarder » Version: 9.0.1

cpe:2.3:a:splunk:universal_forwarder:9.0.1
Splunk » Universal Forwarder » Version: 9.0.2

cpe:2.3:a:splunk:universal_forwarder:9.0.2
Splunk » Universal Forwarder » Version: 9.0.3

cpe:2.3:a:splunk:universal_forwarder:9.0.3
Splunk » Universal Forwarder » Version: 9.0.4

cpe:2.3:a:splunk:universal_forwarder:9.0.4
Splunk » Universal Forwarder » Version: 9.0.5

cpe:2.3:a:splunk:universal_forwarder:9.0.5
Splunk » Universal Forwarder » Version: 9.1.0

cpe:2.3:a:splunk:universal_forwarder:9.1.0
Netapp » H300e » Version: N/A

cpe:2.3:h:netapp:h300e:-
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500e » Version: N/A

cpe:2.3:h:netapp:h500e:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700e » Version: N/A

cpe:2.3:h:netapp:h700e:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Netapp » Solidfire Baseboard Management Controller » Version: N/A

cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-
Apple » Macos » Version: N/A

cpe:2.3:o:apple:macos:-
Apple » Macos » Version: 1.0

cpe:2.3:o:apple:macos:1.0
Apple » Macos » Version: 10.15.7

cpe:2.3:o:apple:macos:10.15.7
Apple » Macos » Version: 11.0

cpe:2.3:o:apple:macos:11.0
Apple » Macos » Version: 11.0.1

cpe:2.3:o:apple:macos:11.0.1
Apple » Macos » Version: 11.1

cpe:2.3:o:apple:macos:11.1
Apple » Macos » Version: 11.1.0

cpe:2.3:o:apple:macos:11.1.0
Apple » Macos » Version: 11.2

cpe:2.3:o:apple:macos:11.2
Apple » Macos » Version: 11.2.1

cpe:2.3:o:apple:macos:11.2.1
Apple » Macos » Version: 11.3

cpe:2.3:o:apple:macos:11.3
Apple » Macos » Version: 11.3.1

cpe:2.3:o:apple:macos:11.3.1
Apple » Macos » Version: 11.4

cpe:2.3:o:apple:macos:11.4
Apple » Macos » Version: 11.5

cpe:2.3:o:apple:macos:11.5
Apple » Macos » Version: 11.5.1

cpe:2.3:o:apple:macos:11.5.1
Apple » Macos » Version: 11.6

cpe:2.3:o:apple:macos:11.6
Apple » Macos » Version: 11.6.1

cpe:2.3:o:apple:macos:11.6.1
Apple » Macos » Version: 11.6.2

cpe:2.3:o:apple:macos:11.6.2
Apple » Macos » Version: 11.6.3

cpe:2.3:o:apple:macos:11.6.3
Apple » Macos » Version: 11.6.5

cpe:2.3:o:apple:macos:11.6.5
Apple » Macos » Version: 11.6.6

cpe:2.3:o:apple:macos:11.6.6
Apple » Macos » Version: 11.6.7

cpe:2.3:o:apple:macos:11.6.7
Apple » Macos » Version: 11.6.8

cpe:2.3:o:apple:macos:11.6.8
Apple » Macos » Version: 11.7

cpe:2.3:o:apple:macos:11.7
Apple » Macos » Version: 11.7.1

cpe:2.3:o:apple:macos:11.7.1
Apple » Macos » Version: 11.7.10

cpe:2.3:o:apple:macos:11.7.10
Apple » Macos » Version: 11.7.2

cpe:2.3:o:apple:macos:11.7.2
Apple » Macos » Version: 11.7.3

cpe:2.3:o:apple:macos:11.7.3
Apple » Macos » Version: 11.7.5

cpe:2.3:o:apple:macos:11.7.5
Apple » Macos » Version: 11.7.6

cpe:2.3:o:apple:macos:11.7.6
Apple » Macos » Version: 11.7.7

cpe:2.3:o:apple:macos:11.7.7
Apple » Macos » Version: 11.7.8

cpe:2.3:o:apple:macos:11.7.8
Apple » Macos » Version: 11.7.9

cpe:2.3:o:apple:macos:11.7.9
Apple » Macos » Version: 12.0

cpe:2.3:o:apple:macos:12.0
Apple » Macos » Version: 12.0.0

cpe:2.3:o:apple:macos:12.0.0
Apple » Macos » Version: 12.0.1

cpe:2.3:o:apple:macos:12.0.1
Apple » Macos » Version: 12.1

cpe:2.3:o:apple:macos:12.1
Apple » Macos » Version: 12.2

cpe:2.3:o:apple:macos:12.2
Apple » Macos » Version: 12.2.1

cpe:2.3:o:apple:macos:12.2.1
Apple » Macos » Version: 7.5.3

cpe:2.3:o:apple:macos:7.5.3
Apple » Macos » Version: 7.6

cpe:2.3:o:apple:macos:7.6
Apple » Macos » Version: 7.6.1

cpe:2.3:o:apple:macos:7.6.1
Apple » Macos » Version: 8.0

cpe:2.3:o:apple:macos:8.0
Apple » Macos » Version: 8.1

cpe:2.3:o:apple:macos:8.1
Apple » Macos » Version: 8.5

cpe:2.3:o:apple:macos:8.5
Apple » Macos » Version: 8.6

cpe:2.3:o:apple:macos:8.6
Apple » Macos » Version: 9

cpe:2.3:o:apple:macos:9
Apple » Macos » Version: 9.0

cpe:2.3:o:apple:macos:9.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Netapp » H300e Firmware » Version: N/A

cpe:2.3:o:netapp:h300e_firmware:-
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500e Firmware » Version: N/A

cpe:2.3:o:netapp:h500e_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700e Firmware » Version: N/A

cpe:2.3:o:netapp:h700e_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-
Netapp » Solidfire Baseboard Management Controller Firmware » Version: N/A

cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22946

Products

Pricing

Contact Us