CVE-2021-22922

 

Published at: - 05-08-2021 11:15

Last modified: - 31-08-2022 12:39

Total changes: - 15

Description

When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

 

Verification logic

 

Reference

• https://hackerone.com/reports/1213175
• FEDORA-2021-5d21b90a30-Mailing List, Third Party Advisory
• [kafka-dev] 20210831 Security vulnerabilities in kafka:2.13-2.6.0/2.7.0 docker image-Mailing List, Third Party Advisory
• [kafka-users] 20210831 Security vulnerabilities in kafka:2.13-2.6.0/2.7.0 docker image-Mailing List, Third Party Advisory
• [kafka-dev] 20210901 Re: [EXTERNAL] Re: Security vulnerabilities in kafka:2.13-2.6.0/2.7.0 docker image-Mailing List, Third Party Advisory
• [kafka-users] 20210901 Re: [EXTERNAL] Re: Security vulnerabilities in kafka:2.13-2.6.0/2.7.0 docker image-Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210902-0003/
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

 

Keywords

NVD

 

CVE-2021-22922

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures