UpHeron
All vulnerabilities

Servers and applications

CVE-2021-22898

curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing…

Severity
Low 3.1
Published
11 Jun 2021
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
5.7.34, 8.0.25
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.7 up to 7.76.1
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version before 5.7.34
  • From 8.0.15 before 8.0.25

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-22898
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-22898