CVE-2022-22576

CVE-2022-22576

Name

CVE-2022-22576

Description

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
MISC	https://hackerone.com/reports/1526328
Third Party Advisory	https://security.netapp.com/advisory/ntap-20220609-0008/
Third Party Advisory	https://www.debian.org/security/2022/dsa-5197
Mailing List	https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
Third Party Advisory	https://security.gentoo.org/glsa/202212-01

Type

URI

MISC

https://hackerone.com/reports/1526328

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220609-0008/

Third Party Advisory

https://www.debian.org/security/2022/dsa-5197

Mailing List

https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html

Third Party Advisory

https://security.gentoo.org/glsa/202212-01

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:haxx:curl::::::::`	curl	>= 7.33.0	< 7.83.0

CPE URI

Source package

Min version

Max version

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

curl

>= 7.33.0

< 7.83.0

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
curl	edge-main	7.83.0-r0	Natanael Copa <ncopa@alpinelinux.org>	fixed
curl	edge-main	7.79.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.78.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.77.0-r0	Natanael Copa <ncopa@alpinelinux.org>	possibly vulnerable
curl	edge-main	7.76.0-r0	None	possibly vulnerable
curl	edge-main	7.74.0-r0	None	possibly vulnerable
curl	edge-main	7.72.0-r0	None	possibly vulnerable
curl	edge-main	7.71.0-r0	None	possibly vulnerable
curl	edge-main	7.66.0-r0	None	possibly vulnerable
curl	edge-main	7.65.0-r0	None	possibly vulnerable
curl	edge-main	7.64.0-r0	None	possibly vulnerable
curl	edge-main	7.62.0-r0	None	possibly vulnerable
curl	edge-main	7.61.1-r0	None	possibly vulnerable
curl	edge-main	7.61.0-r0	None	possibly vulnerable
curl	edge-main	7.60.0-r0	None	possibly vulnerable
curl	edge-main	7.59.0-r0	None	possibly vulnerable
curl	edge-main	7.57.0-r0	None	possibly vulnerable
curl	edge-main	7.56.1-r0	None	possibly vulnerable
curl	edge-main	7.55.0-r0	None	possibly vulnerable
curl	edge-main	7.54.0-r0	None	possibly vulnerable
curl	edge-main	7.53.1-r2	None	possibly vulnerable
curl	edge-main	7.53.0-r0	None	possibly vulnerable
curl	edge-main	7.52.1-r0	None	possibly vulnerable
curl	edge-main	7.51.0-r0	None	possibly vulnerable
curl	edge-main	7.50.3-r0	None	possibly vulnerable
curl	edge-main	7.50.2-r0	None	possibly vulnerable
curl	edge-main	7.50.1-r0	None	possibly vulnerable
curl	edge-main	7.36.0-r0	None	possibly vulnerable
curl	3.22-main	7.83.0-r0	None	fixed
curl	3.22-main	7.79.0-r0	None	possibly vulnerable
curl	3.22-main	7.78.0-r0	None	possibly vulnerable
curl	3.22-main	7.77.0-r0	None	possibly vulnerable
curl	3.22-main	7.76.0-r0	None	possibly vulnerable
curl	3.22-main	7.74.0-r0	None	possibly vulnerable
curl	3.22-main	7.72.0-r0	None	possibly vulnerable
curl	3.22-main	7.71.0-r0	None	possibly vulnerable
curl	3.22-main	7.66.0-r0	None	possibly vulnerable
curl	3.22-main	7.65.0-r0	None	possibly vulnerable
curl	3.22-main	7.64.0-r0	None	possibly vulnerable
curl	3.22-main	7.62.0-r0	None	possibly vulnerable
curl	3.22-main	7.61.1-r0	None	possibly vulnerable
curl	3.22-main	7.61.0-r0	None	possibly vulnerable
curl	3.22-main	7.60.0-r0	None	possibly vulnerable
curl	3.22-main	7.59.0-r0	None	possibly vulnerable
curl	3.22-main	7.57.0-r0	None	possibly vulnerable
curl	3.22-main	7.56.1-r0	None	possibly vulnerable
curl	3.22-main	7.55.0-r0	None	possibly vulnerable
curl	3.22-main	7.54.0-r0	None	possibly vulnerable
curl	3.22-main	7.53.1-r2	None	possibly vulnerable
curl	3.22-main	7.53.0-r0	None	possibly vulnerable
curl	3.22-main	7.52.1-r0	None	possibly vulnerable
curl	3.22-main	7.51.0-r0	None	possibly vulnerable
curl	3.22-main	7.50.3-r0	None	possibly vulnerable
curl	3.22-main	7.50.2-r0	None	possibly vulnerable
curl	3.22-main	7.50.1-r0	None	possibly vulnerable
curl	3.22-main	7.36.0-r0	None	possibly vulnerable
curl	3.21-main	7.83.0-r0	None	fixed
curl	3.21-main	7.79.0-r0	None	possibly vulnerable
curl	3.21-main	7.78.0-r0	None	possibly vulnerable
curl	3.21-main	7.77.0-r0	None	possibly vulnerable
curl	3.21-main	7.76.0-r0	None	possibly vulnerable
curl	3.21-main	7.74.0-r0	None	possibly vulnerable
curl	3.21-main	7.72.0-r0	None	possibly vulnerable
curl	3.21-main	7.71.0-r0	None	possibly vulnerable
curl	3.21-main	7.66.0-r0	None	possibly vulnerable
curl	3.21-main	7.65.0-r0	None	possibly vulnerable
curl	3.21-main	7.64.0-r0	None	possibly vulnerable
curl	3.21-main	7.62.0-r0	None	possibly vulnerable
curl	3.21-main	7.61.1-r0	None	possibly vulnerable
curl	3.21-main	7.61.0-r0	None	possibly vulnerable
curl	3.21-main	7.60.0-r0	None	possibly vulnerable
curl	3.21-main	7.59.0-r0	None	possibly vulnerable
curl	3.21-main	7.57.0-r0	None	possibly vulnerable
curl	3.21-main	7.56.1-r0	None	possibly vulnerable
curl	3.21-main	7.55.0-r0	None	possibly vulnerable
curl	3.21-main	7.54.0-r0	None	possibly vulnerable
curl	3.21-main	7.53.1-r2	None	possibly vulnerable
curl	3.21-main	7.53.0-r0	None	possibly vulnerable
curl	3.21-main	7.52.1-r0	None	possibly vulnerable
curl	3.21-main	7.51.0-r0	None	possibly vulnerable
curl	3.21-main	7.50.3-r0	None	possibly vulnerable
curl	3.21-main	7.50.2-r0	None	possibly vulnerable
curl	3.21-main	7.50.1-r0	None	possibly vulnerable
curl	3.21-main	7.36.0-r0	None	possibly vulnerable
curl	3.20-main	7.83.0-r0	None	fixed
curl	3.20-main	7.79.0-r0	None	possibly vulnerable
curl	3.20-main	7.78.0-r0	None	possibly vulnerable
curl	3.20-main	7.77.0-r0	None	possibly vulnerable
curl	3.20-main	7.76.0-r0	None	possibly vulnerable
curl	3.20-main	7.74.0-r0	None	possibly vulnerable
curl	3.20-main	7.72.0-r0	None	possibly vulnerable
curl	3.20-main	7.71.0-r0	None	possibly vulnerable
curl	3.20-main	7.66.0-r0	None	possibly vulnerable
curl	3.20-main	7.65.0-r0	None	possibly vulnerable
curl	3.20-main	7.64.0-r0	None	possibly vulnerable
curl	3.20-main	7.62.0-r0	None	possibly vulnerable
curl	3.20-main	7.61.1-r0	None	possibly vulnerable
curl	3.20-main	7.61.0-r0	None	possibly vulnerable
curl	3.20-main	7.60.0-r0	None	possibly vulnerable
curl	3.20-main	7.59.0-r0	None	possibly vulnerable
curl	3.20-main	7.57.0-r0	None	possibly vulnerable
curl	3.20-main	7.56.1-r0	None	possibly vulnerable
curl	3.20-main	7.55.0-r0	None	possibly vulnerable
curl	3.20-main	7.54.0-r0	None	possibly vulnerable
curl	3.20-main	7.53.1-r2	None	possibly vulnerable
curl	3.20-main	7.53.0-r0	None	possibly vulnerable
curl	3.20-main	7.52.1-r0	None	possibly vulnerable
curl	3.20-main	7.51.0-r0	None	possibly vulnerable
curl	3.20-main	7.50.3-r0	None	possibly vulnerable
curl	3.20-main	7.50.2-r0	None	possibly vulnerable
curl	3.20-main	7.50.1-r0	None	possibly vulnerable
curl	3.20-main	7.36.0-r0	None	possibly vulnerable
curl	3.19-main	7.83.0-r0	None	fixed
curl	3.19-main	7.79.0-r0	None	possibly vulnerable
curl	3.19-main	7.78.0-r0	None	possibly vulnerable
curl	3.19-main	7.77.0-r0	None	possibly vulnerable
curl	3.19-main	7.76.0-r0	None	possibly vulnerable
curl	3.19-main	7.74.0-r0	None	possibly vulnerable
curl	3.19-main	7.72.0-r0	None	possibly vulnerable
curl	3.19-main	7.71.0-r0	None	possibly vulnerable
curl	3.19-main	7.66.0-r0	None	possibly vulnerable
curl	3.19-main	7.65.0-r0	None	possibly vulnerable
curl	3.19-main	7.64.0-r0	None	possibly vulnerable
curl	3.19-main	7.62.0-r0	None	possibly vulnerable
curl	3.19-main	7.61.1-r0	None	possibly vulnerable
curl	3.19-main	7.61.0-r0	None	possibly vulnerable
curl	3.19-main	7.60.0-r0	None	possibly vulnerable
curl	3.19-main	7.59.0-r0	None	possibly vulnerable
curl	3.19-main	7.57.0-r0	None	possibly vulnerable
curl	3.19-main	7.56.1-r0	None	possibly vulnerable
curl	3.19-main	7.55.0-r0	None	possibly vulnerable
curl	3.19-main	7.54.0-r0	None	possibly vulnerable
curl	3.19-main	7.53.1-r2	None	possibly vulnerable
curl	3.19-main	7.53.0-r0	None	possibly vulnerable
curl	3.19-main	7.52.1-r0	None	possibly vulnerable
curl	3.19-main	7.51.0-r0	None	possibly vulnerable
curl	3.19-main	7.50.3-r0	None	possibly vulnerable
curl	3.19-main	7.50.2-r0	None	possibly vulnerable
curl	3.19-main	7.50.1-r0	None	possibly vulnerable
curl	3.19-main	7.36.0-r0	None	possibly vulnerable
curl	3.18-main	7.83.0-r0	None	fixed
curl	3.17-main	7.83.0-r0	None	fixed
curl	3.12-main	7.79.1-r1	Natanael Copa <ncopa@alpinelinux.org>	fixed

Source package

Branch

Version

Maintainer

Status

References

Match rules

Vulnerable and fixed packages