CVE-2021-22947

描述

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server.

如何修補 CVE-2021-22947

要修補 CVE-2021-22947,請將受影響套件升級到下列已修補版本。

• —升級至 7.79.0-r0 或更新版本

CVE-2021-22947 正在被利用嗎?

低 — EPSS 為 2.8%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 7.20.0, < 7.79.0-r0

CVSS 分數

參考連結(1)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2021-22947