CVE details
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
Affected ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| ftp/linux-c7-curl | linux-c7-curl | 7.29.0_13 | unaddressed | emulation@FreeBSD.org |
| ftp/linux-rl9-curl | linux-rl9-curl | 7.76.1_13 | unaddressed | emulation@FreeBSD.org |
Template for a VuXML entry
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>linux-c7-curl</name>
<range><lt>5.7.34</lt></range>
</package>
<package>
<name>linux-rl9-curl</name>
<range><lt>5.7.34</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>curl 7.7 through 7.76.1 suffers from an information disclosure when
the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in
libcurl, is used to send variable=content pairs to TELNET servers. Due
to a flaw in the option parser for sending NEW_ENV variables, libcurl
could be made to pass on uninitialized data from a stack based buffer
to the server, resulting in potentially revealing sensitive internal
information to the server using a clear-text network protocol.</p>
</body>
</description>
<references>
<cvename>CVE-2021-22898</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2021-22898</url>
</references>
<dates>
<discovery>2021-06-11</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>