A flaw was found in libcurl. When sending data to an MQTT server could in some situations lead to libcurl using already freed memory and then try to free it again. The highest threat from this vulnerability is to data confidentiality as well as system availability.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 2 - Core | curl | 2021-12-08 02:22 | ALAS2-2021-1724 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv3 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
NVD | CVSSv2 | 5.8 | AV:N/AC:M/Au:N/C:P/I:N/A:P |
NVD | CVSSv3 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |