EXPOSURES › CVE-2021-22945
CVE-2021-22945
CRITICAL
DETAIL
SourceNVD · cve
Published2021-09-23
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-22945 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendorOracle · vendorSiemens · vendorSplunk · vendorapple · vendordebian · vendorfedoraproject · vendorhaxx · vendorcloud backup · productclustered data ontap · productdebian linux · productfedora · producth300e · producth300e firmware · producth300s · producth300s firmware · producth410s · producth410s firmware · producth500e · producth500e firmware · producth500s · producth500s firmware · producth700e · producth700e firmware · producth700s · producth700s firmware · productlibcurl · productmacos · productmysql server · productsinec ins · productsolidfire baseboard management controller · productsolidfire baseboard management controller firmware · productuniversal forwarder · product
DESCRIPTION
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
AFFECTED FEDRAMP PRODUCTS · 14
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Cloud Insights NetApp |
In Process |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Mendix Cloud for Government Siemens Government Technologies |
In Process |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Splunk Cloud Platform for FedRAMP High Splunk |
In Process |
| Splunk Cloud Platform for FedRAMP Moderate Splunk |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |