Wind River Support Network

HomeDefectsLIN10-10036
Fixed

LIN10-10036 : Security Advisory - curl - CVE-2022-27776

Created: Apr 27, 2022    Updated: Jun 28, 2022
Resolved Date: Jun 24, 2022
Found In Version: 10.17.41.1
Fix Version: 10.17.41.27
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

curl might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

https://curl.se/docs/CVE-2022-27776.html

CREATE(Triage):(User=admin) CVE-2022-27776 (https://nvd.nist.gov/vuln/detail/CVE-2022-27776)

CVEs


Live chat
Online