CVE-2021-22898
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-22898
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22898.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-22898
- Aliases
- Downstream
- Related
- Published
- 2021-06-11T16:15:11Z
- Modified
- 2025-11-02T15:07:17.389706Z
- Severity
-
- 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
curl 7.7 through 7.76.1 suffers from an information disclosure when the
-tcommand line option, known asCURLOPT_TELNETOPTIONSin libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol. - References
-
- http://www.openwall.com/lists/oss-security/2021/07/21/4
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://curl.se/docs/CVE-2021-22898.html
- https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
- https://hackerone.com/reports/1176461
- https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
- https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
- https://www.debian.org/security/2022/dsa-5197
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2022.html
Affected packages
Git / github.com/curl/curl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/curl/curl
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
before_ftp_statemachine
before_urldata_rename
curl-6_5
curl-6_5_1
curl-6_5_2
curl-7_10
curl-7_10_1
curl-7_10_2
curl-7_10_3
curl-7_10_4
curl-7_10_5
curl-7_10_6
curl-7_10_7
curl-7_10_8
curl-7_11_0
curl-7_11_1
curl-7_11_2
curl-7_12_0
curl-7_12_1
curl-7_12_2
curl-7_12_3
curl-7_13_0
curl-7_13_1
curl-7_13_2
curl-7_14_0
curl-7_14_1
curl-7_15_0
curl-7_15_1
curl-7_15_2
curl-7_15_3
curl-7_15_4
curl-7_15_5
curl-7_15_6-prepipeline
curl-7_16_0
curl-7_16_1
curl-7_16_2
curl-7_16_3
curl-7_16_4
curl-7_17_0
curl-7_17_0-preldapfix
curl-7_17_1
curl-7_18_0
curl-7_18_1
curl-7_18_2
curl-7_19_0
curl-7_19_1
curl-7_19_2
curl-7_19_3
curl-7_19_4
curl-7_19_5
curl-7_19_6
curl-7_19_7
curl-7_1_1
curl-7_2
curl-7_20_0
curl-7_20_1
curl-7_21_0
curl-7_21_1
curl-7_21_2
curl-7_21_3
curl-7_21_4
curl-7_21_5
curl-7_21_6
curl-7_21_7
curl-7_22_0
curl-7_23_0
curl-7_23_1
curl-7_24_0
curl-7_25_0
curl-7_26_0
curl-7_27_0
curl-7_28_0
curl-7_28_1
curl-7_29_0
curl-7_3
curl-7_30_0
curl-7_31_0
curl-7_32_0
curl-7_33_0
curl-7_34_0
curl-7_35_0
curl-7_36_0
curl-7_37_0
curl-7_37_1
curl-7_38_0
curl-7_39_0
curl-7_40_0
curl-7_41_0
curl-7_42_0
curl-7_43_0
curl-7_44_0
curl-7_45_0
curl-7_46_0
curl-7_47_0
curl-7_47_1
curl-7_48_0
curl-7_49_0
curl-7_49_1
curl-7_4_1
curl-7_5
curl-7_50_0
curl-7_50_1
curl-7_50_2
curl-7_50_3
curl-7_51_0
curl-7_52_0
curl-7_52_1
curl-7_53_0
curl-7_53_1
curl-7_54_0
curl-7_54_1
curl-7_55_0
curl-7_55_1
curl-7_56_0
curl-7_56_1
curl-7_57_0
curl-7_58_0
curl-7_59_0
curl-7_5_2
curl-7_6
curl-7_6-pre4
curl-7_60_0
curl-7_61_0
curl-7_61_1
curl-7_62_0
curl-7_63_0
curl-7_64_0
curl-7_64_1
curl-7_65_0
curl-7_65_1
curl-7_65_2
curl-7_65_3
curl-7_66_0
curl-7_67_0
curl-7_68_0
curl-7_69_0
curl-7_69_1
curl-7_6_1
curl-7_6_1-pre1
curl-7_6_1-pre2
curl-7_6_1-pre3
curl-7_7
curl-7_7-beta1
curl-7_7-beta2
curl-7_7-beta3
curl-7_7-beta5
curl-7_70_0
curl-7_71_0
curl-7_71_1
curl-7_72_0
curl-7_73_0
curl-7_74_0
curl-7_75_0
curl-7_76_0
curl-7_76_1
curl-7_7_1
curl-7_7_2
curl-7_7_3
curl-7_7_alpha2
curl-7_8
curl-7_8-pre2
curl-7_8_1
curl-7_8_1-pre3
curl-7_9
curl-7_9_1
curl-7_9_2
curl-7_9_3
curl-7_9_3-pre1
curl-7_9_3-pre2
curl-7_9_3-pre3
curl-7_9_4
curl-7_9_5
curl-7_9_5-pre2
curl-7_9_5-pre4
curl-7_9_6
curl-7_9_7
curl-7_9_7-pre2
curl-7_9_8
curl_7_6-pre3
Database specific
vanir_signatures
[
{
"source": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"61856253574400304251431398167931381325",
"240827579168948696521027871241596897491",
"110949695118154885913644981527849872064",
"233170882117233154983717156358912138949"
]
},
"target": {
"file": "lib/telnet.c"
},
"id": "CVE-2021-22898-462dbdfc",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde",
"deprecated": false,
"digest": {
"function_hash": "278374588349917216130301655130053651655",
"length": 2157.0
},
"target": {
"function": "suboption",
"file": "lib/telnet.c"
},
"id": "CVE-2021-22898-efb2e938",
"signature_version": "v1",
"signature_type": "Function"
}
]
Git / github.com/mysql/mysql-server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mysql/mysql-server
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
mysql-3.*
mysql-3.23.22-beta
mysql-3.23.24-beta
mysql-3.23.27-beta
mysql-3.23.28-gamma
mysql-3.23.29a-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.34
mysql-3.23.35
mysql-3.23.36
mysql-3.23.37
mysql-3.23.38
mysql-3.23.39
mysql-3.23.41
mysql-3.23.42
mysql-3.23.44
mysql-3.23.45
mysql-3.23.46
mysql-3.23.47
mysql-3.23.48
mysql-3.23.50
mysql-3.23.51
mysql-3.23.52
mysql-3.23.53
mysql-3.23.54
mysql-3.23.55
mysql-3.23.56
mysql-3.23.57
mysql-3.23.58
mysql-4.*
mysql-4.0.1
mysql-4.0.10
mysql-4.0.11
mysql-4.0.12
mysql-4.0.13
mysql-4.0.14
mysql-4.0.15
mysql-4.0.16
mysql-4.0.17
mysql-4.0.18
mysql-4.0.19
mysql-4.0.2
mysql-4.0.20
mysql-4.0.21
mysql-4.0.22
mysql-4.0.23
mysql-4.0.24
mysql-4.0.25
mysql-4.0.26
mysql-4.0.27
mysql-4.0.28
mysql-4.0.3
mysql-4.0.30
mysql-4.0.4
mysql-4.0.5
mysql-4.0.6
mysql-4.0.7
mysql-4.0.8
mysql-4.0.9
mysql-4.1.0
mysql-4.1.1
mysql-4.1.10
mysql-4.1.10a
mysql-4.1.10b
mysql-4.1.11
mysql-4.1.12
mysql-4.1.13
mysql-4.1.13a
mysql-4.1.14
mysql-4.1.15
mysql-4.1.16
mysql-4.1.18
mysql-4.1.19
mysql-4.1.2
mysql-4.1.20
mysql-4.1.21
mysql-4.1.22
mysql-4.1.23
mysql-4.1.24
mysql-4.1.3
mysql-4.1.4
mysql-4.1.5
mysql-4.1.6
mysql-4.1.7
mysql-4.1.8
mysql-4.1.9
mysql-5.*
mysql-5.0.0
mysql-5.0.1
mysql-5.0.10
mysql-5.0.10a
mysql-5.0.11
mysql-5.0.12
mysql-5.0.13
mysql-5.0.14
mysql-5.0.15
mysql-5.0.16
mysql-5.0.16a
mysql-5.0.17
mysql-5.0.17b
mysql-5.0.18
mysql-5.0.19
mysql-5.0.19a
mysql-5.0.2
mysql-5.0.2-alpha
mysql-5.0.20
mysql-5.0.20a
mysql-5.0.21
mysql-5.0.22
mysql-5.0.23
mysql-5.0.24
mysql-5.0.24a
mysql-5.0.25
mysql-5.0.26
mysql-5.0.27
mysql-5.0.28
mysql-5.0.3
mysql-5.0.30
mysql-5.0.32
mysql-5.0.33
mysql-5.0.34
mysql-5.0.36
mysql-5.0.37
mysql-5.0.38
mysql-5.0.4
mysql-5.0.40
mysql-5.0.41
mysql-5.0.42
mysql-5.0.44
mysql-5.0.45
mysql-5.0.46
mysql-5.0.48
mysql-5.0.5
mysql-5.0.50
mysql-5.0.51
mysql-5.0.51a
mysql-5.0.52
mysql-5.0.54
mysql-5.0.54a
mysql-5.0.56
mysql-5.0.58
mysql-5.0.6
mysql-5.0.60
mysql-5.0.60sp1
mysql-5.0.62
mysql-5.0.64
mysql-5.0.66
mysql-5.0.66a
mysql-5.0.66sp1
mysql-5.0.67
mysql-5.0.68
mysql-5.0.7
mysql-5.0.70
mysql-5.0.72
mysql-5.0.72sp1
mysql-5.0.74
mysql-5.0.74sp1
mysql-5.0.75
mysql-5.0.76
mysql-5.0.77
mysql-5.0.78
mysql-5.0.79
mysql-5.0.8
mysql-5.0.80
mysql-5.0.81
mysql-5.0.82
mysql-5.0.82sp1
mysql-5.0.83
mysql-5.0.84
mysql-5.0.84sp1
mysql-5.0.85
mysql-5.0.86
mysql-5.0.87
mysql-5.0.87sp1
mysql-5.0.88
mysql-5.0.9
mysql-5.0.90
mysql-5.0.91
mysql-5.0.92
mysql-5.0.93
mysql-5.0.94
mysql-5.0.95
mysql-5.0.96
mysql-5.1.11
mysql-5.1.12
mysql-5.1.13
mysql-5.1.14
mysql-5.1.14-ndb-6.1.0
mysql-5.1.15
mysql-5.1.15-ndb-6.1.1
mysql-5.1.15-ndb-6.1.10
mysql-5.1.15-ndb-6.1.11
mysql-5.1.15-ndb-6.1.12
mysql-5.1.15-ndb-6.1.13
mysql-5.1.15-ndb-6.1.14
mysql-5.1.15-ndb-6.1.15
mysql-5.1.15-ndb-6.1.16
mysql-5.1.15-ndb-6.1.19
mysql-5.1.15-ndb-6.1.2
mysql-5.1.15-ndb-6.1.20
mysql-5.1.15-ndb-6.1.21
mysql-5.1.15-ndb-6.1.22
mysql-5.1.15-ndb-6.1.23
mysql-5.1.15-ndb-6.1.3
mysql-5.1.15-ndb-6.1.5
mysql-5.1.15-ndb-6.1.6
mysql-5.1.15-ndb-6.1.7
mysql-5.1.15-ndb-6.1.8
mysql-5.1.15-ndb-6.1.9
mysql-5.1.16
mysql-5.1.16-ndb-6.2.0
mysql-5.1.17
mysql-5.1.18
mysql-5.1.18-ndb-6.2.1
mysql-5.1.18-ndb-6.2.2
mysql-5.1.19
mysql-5.1.19-ndb-6.2.3
mysql-5.1.19-ndb-6.2.4
mysql-5.1.19-ndb-6.3.0
mysql-5.1.19-ndb-6.3.1
mysql-5.1.20
mysql-5.1.20-beta
mysql-5.1.21
mysql-5.1.22
mysql-5.1.22-ndb-6.2.10
mysql-5.1.22-ndb-6.2.5-no-prod
mysql-5.1.22-ndb-6.2.5-no-prod-fix1
mysql-5.1.22-ndb-6.2.6
mysql-5.1.22-ndb-6.2.7
mysql-5.1.22-ndb-6.2.8
mysql-5.1.22-ndb-6.2.9
mysql-5.1.22-ndb-6.3.2-no-prod
mysql-5.1.22-ndb-6.3.3
mysql-5.1.22-ndb-6.3.4
mysql-5.1.22-ndb-6.3.5
mysql-5.1.22-ndb-6.3.6
mysql-5.1.22-ndb-6.3.7
mysql-5.1.23
mysql-5.1.23-ndb-6.2.11
mysql-5.1.23-ndb-6.2.12
mysql-5.1.23-ndb-6.2.13
mysql-5.1.23-ndb-6.2.14
mysql-5.1.23-ndb-6.2.15
mysql-5.1.23-ndb-6.3.10
mysql-5.1.23-ndb-6.3.11
mysql-5.1.23-ndb-6.3.12
mysql-5.1.23-ndb-6.3.7
mysql-5.1.23-ndb-6.3.8
mysql-5.1.23-ndb-6.3.9
mysql-5.1.24
mysql-5.1.24-ndb-6.3.13
mysql-5.1.24-ndb-6.3.14
mysql-5.1.24-ndb-6.3.15
mysql-5.1.24-ndb-6.3.16
mysql-5.1.25
mysql-5.1.26
mysql-5.1.27-ndb-6.3.17
mysql-5.1.28
mysql-5.1.28-ndb-6.2.16
mysql-5.1.28-ndb-6.3.18
mysql-5.1.29
mysql-5.1.29-ndb-6.3.19
mysql-5.1.3
mysql-5.1.30
mysql-5.1.30-ndb-6.3.20
mysql-5.1.30-ndb-6.4.0
mysql-5.1.31
mysql-5.1.31-ndb-6.3.21
mysql-5.1.31-ndb-6.3.22
mysql-5.1.31-ndb-6.4.1
mysql-5.1.31-ndb-6.4.2
mysql-5.1.31sp1
mysql-5.1.32
mysql-5.1.32-ndb-6.3.23
mysql-5.1.32-ndb-6.3.24
mysql-5.1.32-ndb-6.4.3
mysql-5.1.32-ndb-7.0.4
mysql-5.1.32-ndb-7.0.5
mysql-5.1.33
mysql-5.1.34
mysql-5.1.34-ndb-6.2.18
mysql-5.1.34-ndb-6.3.25
mysql-5.1.34-telco-7.0.6
mysql-5.1.34sp1
mysql-5.1.35
mysql-5.1.35-ndb-6.3.26
mysql-5.1.35-ndb-7.0.7
mysql-5.1.36
mysql-5.1.37
mysql-5.1.37-ndb-6.3.27
mysql-5.1.37-ndb-6.3.27a
mysql-5.1.37-ndb-7.0.8
mysql-5.1.37-ndb-7.0.8a
mysql-5.1.37sp1
mysql-5.1.38
mysql-5.1.39
mysql-5.1.39-ndb-6.3.28
mysql-5.1.39-ndb-6.3.28a
mysql-5.1.39-ndb-6.3.28b
mysql-5.1.39-ndb-6.3.29
mysql-5.1.39-ndb-6.3.30
mysql-5.1.39-ndb-7.0.10
mysql-5.1.39-ndb-7.0.9
mysql-5.1.39-ndb-7.0.9b
mysql-5.1.39-ndb-7.1.1
mysql-5.1.4
mysql-5.1.40
mysql-5.1.40sp1
mysql-5.1.41
mysql-5.1.41-ndb-6.3.31
mysql-5.1.41-ndb-6.3.31a
mysql-5.1.41-ndb-6.3.31b
mysql-5.1.41-ndb-6.3.32
mysql-5.1.41-ndb-7.0.11
mysql-5.1.41-ndb-7.0.11a
mysql-5.1.41-ndb-7.0.11b
mysql-5.1.41-ndb-7.0.12
mysql-5.1.41-ndb-7.0.12a
mysql-5.1.41-ndb-7.0.12b
mysql-5.1.41-ndb-7.0.13
mysql-5.1.41-ndb-7.1.1
mysql-5.1.41-ndb-7.1.2-beta
mysql-5.1.42
mysql-5.1.43
mysql-5.1.43sp1
mysql-5.1.44
mysql-5.1.44-ndb-6.3.33
mysql-5.1.44-ndb-6.3.34
mysql-5.1.44-ndb-7.0.14
mysql-5.1.44-ndb-7.0.15
mysql-5.1.44-ndb-7.0.15a
mysql-5.1.44-ndb-7.1.3
mysql-5.1.44-ndb-7.1.4
mysql-5.1.44-ndb-7.1.4a
mysql-5.1.45
mysql-5.1.46
mysql-5.1.46sp1
mysql-5.1.47
mysql-5.1.47-ndb-6.3.35
mysql-5.1.47-ndb-7.0.16
mysql-5.1.47-ndb-7.1.5
mysql-5.1.48
mysql-5.1.49
mysql-5.1.49sp1
mysql-5.1.5
mysql-5.1.5-for-windows
mysql-5.1.50
mysql-5.1.51
mysql-5.1.52
mysql-5.1.52sp1
mysql-5.1.53
mysql-5.1.54
mysql-5.1.55
mysql-5.1.56
mysql-5.1.57
mysql-5.1.58
mysql-5.1.59
mysql-5.1.6
mysql-5.1.60
mysql-5.1.61
mysql-5.1.62
mysql-5.1.63
mysql-5.1.65
mysql-5.1.66
mysql-5.1.67
mysql-5.1.68
mysql-5.1.69
mysql-5.1.69-retag
mysql-5.1.7
mysql-5.1.70
mysql-5.1.71
mysql-5.1.72
mysql-5.1.73
mysql-5.1.74
mysql-5.1.75
mysql-5.1.76
mysql-5.1.77
mysql-5.1.9
mysql-5.4.1
mysql-5.4.2
mysql-5.4.3
mysql-5.5.0
mysql-5.5.1-m2
mysql-5.5.10
mysql-5.5.11
mysql-5.5.12
mysql-5.5.13
mysql-5.5.14
mysql-5.5.15
mysql-5.5.16
mysql-5.5.17
mysql-5.5.18
mysql-5.5.19
mysql-5.5.2-m2
mysql-5.5.20
mysql-5.5.21
mysql-5.5.22
mysql-5.5.23
mysql-5.5.24
mysql-5.5.25
mysql-5.5.25a
mysql-5.5.27
mysql-5.5.27-ndb-7.2.8
mysql-5.5.28
mysql-5.5.29
mysql-5.5.3-m3
mysql-5.5.30
mysql-5.5.31
mysql-5.5.32
mysql-5.5.33
mysql-5.5.34
mysql-5.5.35
mysql-5.5.36
mysql-5.5.37
mysql-5.5.38
mysql-5.5.39
mysql-5.5.40
mysql-5.5.41
mysql-5.5.42
mysql-5.5.43
mysql-5.5.44
mysql-5.5.45
mysql-5.5.46
mysql-5.5.47
mysql-5.5.48
mysql-5.5.49
mysql-5.5.5-m3
mysql-5.5.50
mysql-5.5.51
mysql-5.5.52
mysql-5.5.53
mysql-5.5.54
mysql-5.5.55
mysql-5.5.56
mysql-5.5.57
mysql-5.5.58
mysql-5.5.59
mysql-5.5.6-rc
mysql-5.5.60
mysql-5.5.61
mysql-5.5.62
mysql-5.5.63
mysql-5.5.7
mysql-5.5.8
mysql-5.5.9
mysql-5.6.10
mysql-5.6.11
mysql-5.6.12
mysql-5.6.13
mysql-5.6.14
mysql-5.6.15
mysql-5.6.16
mysql-5.6.17
mysql-5.6.19
mysql-5.6.2
mysql-5.6.20
mysql-5.6.21
mysql-5.6.22
mysql-5.6.24
mysql-5.6.25
mysql-5.6.26
mysql-5.6.27
mysql-5.6.28
mysql-5.6.29
mysql-5.6.3
mysql-5.6.30
mysql-5.6.31
mysql-5.6.32
mysql-5.6.33
mysql-5.6.34
mysql-5.6.35
mysql-5.6.36
mysql-5.6.37
mysql-5.6.38
mysql-5.6.39
mysql-5.6.4
mysql-5.6.40
mysql-5.6.41
mysql-5.6.42
mysql-5.6.43
mysql-5.6.45
mysql-5.6.46
mysql-5.6.47
mysql-5.6.48
mysql-5.6.49
mysql-5.6.5
mysql-5.6.50
mysql-5.6.51
mysql-5.6.6
mysql-5.6.7
mysql-5.6.8
mysql-5.6.9
mysql-5.7.1
mysql-5.7.10
mysql-5.7.10-2
mysql-5.7.11
mysql-5.7.12
mysql-5.7.13
mysql-5.7.14
mysql-5.7.15
mysql-5.7.16
mysql-5.7.17
mysql-5.7.18
mysql-5.7.19
mysql-5.7.2
mysql-5.7.20
mysql-5.7.21
mysql-5.7.22
mysql-5.7.24
mysql-5.7.25
mysql-5.7.26
mysql-5.7.27
mysql-5.7.28
mysql-5.7.29
mysql-5.7.3
mysql-5.7.30
mysql-5.7.31
mysql-5.7.32
mysql-5.7.33
mysql-5.7.4
mysql-5.7.5
mysql-5.7.6
mysql-5.7.7
mysql-5.7.8
mysql-5.7.9
mysql-cluster-7.*
mysql-cluster-7.1.29
mysql-cluster-7.1.30
mysql-cluster-7.1.31
mysql-cluster-7.1.32
mysql-cluster-7.1.33
mysql-cluster-7.1.34
mysql-cluster-7.1.35
mysql-cluster-7.1.36
mysql-cluster-7.2.14
mysql-cluster-7.2.15
mysql-cluster-7.2.16
mysql-cluster-7.2.17
mysql-cluster-7.2.18
mysql-cluster-7.2.19
mysql-cluster-7.2.20
mysql-cluster-7.2.21
mysql-cluster-7.3.10
mysql-cluster-7.3.3
mysql-cluster-7.3.4
mysql-cluster-7.3.5
mysql-cluster-7.3.6
mysql-cluster-7.3.7
mysql-cluster-7.3.8
mysql-cluster-7.3.9
mysql-cluster-7.4.1
mysql-cluster-7.4.2
mysql-cluster-7.4.3
mysql-cluster-7.4.4
mysql-cluster-7.4.5
mysql-cluster-7.4.6