Servers and applications
CVE-2022-27782
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.
- Severity
- High 7.5
- Published
- 2 Jun 2022
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 7.83.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
curlServers and applications · cpe:a:haxx:curl |
|