CVE-2021-22925

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

• haxx curl (>= 7.7 < 7.78.0) • fedoraproject fedora 33 • netapp cloud backup • netapp clustered data ontap • netapp hci management node • netapp solidfire • apple mac os x 10.15.7 • apple macos 11.0 • apple macos 11.0.1 • apple macos 11.1 • apple macos 11.1.0 • apple macos 11.2 • apple macos 11.2.1 • apple macos 11.3 • apple macos 11.3.1 • apple macos 11.4 • apple macos 11.5 • oracle mysql server (>= 5.7.0 <= 5.7.35) • oracle mysql server (>= 8.0.0 <= 8.0.26) • oracle peoplesoft enterprise peopletools 8.57 • oracle peoplesoft enterprise peopletools 8.58 • oracle peoplesoft enterprise peopletools 8.59 • siemens sinec infrastructure network services (< 1.0.1.1) • siemens sinema remote connect server (< 3.1) • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • splunk universal forwarder (>= 8.2.0 < 8.2.12) • splunk universal forwarder (>= 9.0.0 < 9.0.6) • splunk universal forwarder 9.1.0