NetSight
IP …
medium5.3

CVE-2021-22925

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl.

Impact

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

Affected products

VendorProductAffected versions
HaxxCurl
from 7.7 before 7.78.0
FedoraprojectFedora
Version 33
NetappCloud Backup
All versions
NetappClustered Data Ontap
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
AppleMac Os X
Version 10.15.7
AppleMacos
Versions 11.0, 11.0.1, 11.1, 11.1.0, 11.2, 11.2.1
OracleMysql Server
from 5.7.0 through 5.7.35
from 8.0.0 through 8.0.26
OraclePeoplesoft Enterprise Peopletools
Versions 8.57, 8.58, 8.59
SiemensSinec Infrastructure Network Services
before 1.0.1.1
SiemensSinema Remote Connect Server
before 3.1

Weakness classification

CWE-200CWE-908

References