CVE-2021-22925
At a glance Severity MEDIUM 5.3 EPSS EPSS 5.37 % · percentile 93 (2026-10-27) State PUBLISHED Published 2021-08-05 Updated 2026-10-14 Assigner hackerone NVD status Modified Description curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CISA-ADP CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) CVSS 2.0 MEDIUM 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* ≥ 7.7 < 7.78.0cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.0:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.1:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.1.0:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.2:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.2.1:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.3:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.3.1:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.4:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:11.5:*:*:*:*:*:*:*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 5.7.0 ≤ 5.7.35cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 8.0.0 ≤ 8.0.26cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* < 1.0.1.1cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:* < 3.1cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* ≥ 8.2.0 < 8.2.12cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.6cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*Affected products
References
Sources
