Low · published June 11, 2021
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.
| Product | Versions | Fixed in |
|---|---|---|
| haxx/curl | ≥ 7.7, ≤ 7.76.1 | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| oracle/communications_cloud_native_core_binding_support_function | all versions | — |
| oracle/communications_cloud_native_core_network_function_cloud_native_environment | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_network_slice_selection_function | all versions | — |
| oracle/communications_cloud_native_core_service_communication_proxy | all versions | — |
| oracle/essbase | < 11.1.2.4.047 | 11.1.2.4.047 |
| oracle/essbase | ≥ 21.0, < 21.3 | 21.3 |
| oracle/mysql_server | < 5.7.34 | 5.7.34 |
| oracle/mysql_server | ≥ 8.0.15, < 8.0.25 | 8.0.25 |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| splunk/universal_forwarder | ≥ 9.0.0, < 9.0.6 | 9.0.6 |
| splunk/universal_forwarder | all versions | — |
| splunk/universal_forwarder | ≥ 8.2.0, < 8.2.12 | 8.2.12 |