CVE-2022-27775
גבוהה 7.5
תיאור (מקור, אנגלית)
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
מדדים
- CVSS 3.1
-
7.5 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — סבירות ניצול
- 3% (אחוזון 100) נכון ל-15/10/2026
- CWE
- CWE-200
מוצרים מושפעים
haxx: curl; debian: debian linux; netapp: hci bootstrap os; netapp: hci compute node; netapp: clustered data ontap; netapp: solidfire \& hci management node; netapp: solidfire \& hci storage node; broadcom: fabric operating system; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware
קישורים
- https://hackerone.com/reports/1546268 ExploitThird Party Advisory
- https://hackerone.com/reports/1546268 ExploitThird Party Advisory
- https://hackerone.com/reports/1546268 ExploitThird Party Advisory
- https://security.gentoo.org/glsa/202212-01 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0008/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5197 Third Party Advisory
- https://security.gentoo.org/glsa/202212-01 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220609-0008/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5197 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html