Logo
vulnerabilityCVE-2022-27782
Name
CVE-2022-27782
Source
NVD ( link)Debian ( link)
Description
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
curl
Exploitable

Vulnerability Ratings#


7.5
CVSSv31
7.5
CVSSv31
5
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
8.20.0
Not Affected
buildroot
master
8.21.0
Not Affected
openwrt
master
8.19.0-r2
Not Affected
openwrt
master
8.20.0-r1
Not Affected
openwrt
openwrt-25.12
8.19.0-r2
Not Affected
openwrt
openwrt-25.12
8.14.1-r1
Not Affected
yocto
master
8.20.0
Not Affected
yocto
scarthgap
8.7.1
Not Affected