{"cve":{"cve_id":"CVE-2021-22924","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.0627,"epss_percentile":0.93481,"epss_as_of":"2026-10-15","description":"libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.","published_at":"2021-08-05T20:16:56Z","last_modified_at":"2026-10-14T11:16:53.787000Z","cvss_v3_score":3.7,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_v3_severity":"LOW","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"poc","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":["CWE-20"],"nvd_references":["https://hackerone.com/reports/1223565","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://security.netapp.com/advisory/ntap-20210902-0003/","https://www.oracle.com/security-alerts/cpujan2022.html","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://www.debian.org/security/2022/dsa-5197","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-10-14T23:59:09.254433Z"},"effective_severity":"LOW","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"debian","vendor_name":"Debian","product_slug":"debian-linux","product_name":"debian_linux","version_start":"9.0","version_start_inclusive":true,"version_end":"9.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"},{"vendor_slug":"debian","vendor_name":"Debian","product_slug":"debian-linux","product_name":"debian_linux","version_start":"10.0","version_start_inclusive":true,"version_end":"10.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"},{"vendor_slug":"debian","vendor_name":"Debian","product_slug":"debian-linux","product_name":"debian_linux","version_start":"11.0","version_start_inclusive":true,"version_end":"11.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"},{"vendor_slug":"fedoraproject","vendor_name":"fedoraproject","product_slug":"fedora","product_name":"fedora","version_start":"33","version_start_inclusive":true,"version_end":"33","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"},{"vendor_slug":"haxx","vendor_name":"haxx","product_slug":"libcurl","product_name":"libcurl","version_start":"7.10.4","version_start_inclusive":true,"version_end":"7.77.0","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NetApp","product_slug":"cloud-backup","product_name":"cloud_backup","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NetApp","product_slug":"clustered-data-ontap","product_name":"Clustered Data ONTAP","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NetApp","product_slug":"solidfire-baseboard-management-controller-firmware","product_name":"solidfire_baseboard_management_controller_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"netapp","vendor_name":"NetApp","product_slug":"solidfire-hci-management-node","product_name":"solidfire_&_hci_management_node","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"mysql-server","product_name":"mysql_server","version_start":"5.7.0","version_start_inclusive":true,"version_end":"5.7.36","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"peoplesoft-enterprise-peopletools","product_name":"peoplesoft_enterprise_peopletools","version_start":"8.57","version_start_inclusive":true,"version_end":"8.57","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"peoplesoft-enterprise-peopletools","product_name":"peoplesoft_enterprise_peopletools","version_start":"8.58","version_start_inclusive":true,"version_end":"8.58","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*"},{"vendor_slug":"oracle","vendor_name":"oracle","product_slug":"peoplesoft-enterprise-peopletools","product_name":"peoplesoft_enterprise_peopletools","version_start":"8.59","version_start_inclusive":true,"version_end":"8.59","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"logo-cmr2020-firmware","product_name":"logo!_cmr2020_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:logo\\!_cmr2020_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"logo-cmr2040-firmware","product_name":"logo!_cmr2040_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:logo\\!_cmr2040_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"ruggedcomrm-1224-lte-firmware","product_name":"ruggedcomrm_1224_lte_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:ruggedcomrm_1224_lte_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m804pb-firmware","product_name":"scalance_m804pb_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m804pb_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m812-1-firmware","product_name":"scalance_m812-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m812-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m816-1-firmware","product_name":"scalance_m816-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m816-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m826-2-firmware","product_name":"scalance_m826-2_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m826-2_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m874-2-firmware","product_name":"scalance_m874-2_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m874-2_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m874-3-firmware","product_name":"scalance_m874-3_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m874-3_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m876-3-firmware","product_name":"scalance_m876-3_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m876-3_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-m876-4-firmware","product_name":"scalance_m876-4_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_m876-4_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-mum856-1-firmware","product_name":"scalance_mum856-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_mum856-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-s615-firmware","product_name":"scalance_s615_firmware","version_start":null,"version_start_inclusive":null,"version_end":"7.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-cp-1543-1-firmware","product_name":"simatic_cp_1543-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"3.0.22","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-cp-1545-1-firmware","product_name":"simatic_cp_1545-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"1.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_cp_1545-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-rtu3010c-firmware","product_name":"simatic_rtu3010c_firmware","version_start":null,"version_start_inclusive":null,"version_end":"5.0.14","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_rtu3010c_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-rtu3030c-firmware","product_name":"simatic_rtu3030c_firmware","version_start":null,"version_start_inclusive":null,"version_end":"5.0.14","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_rtu3030c_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-rtu3031c-firmware","product_name":"simatic_rtu3031c_firmware","version_start":null,"version_start_inclusive":null,"version_end":"5.0.14","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_rtu3031c_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"simatic-rtu-3041c-firmware","product_name":"simatic_rtu_3041c_firmware","version_start":null,"version_start_inclusive":null,"version_end":"5.0.14","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:simatic_rtu_3041c_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"sinec-infrastructure-network-services","product_name":"sinec_infrastructure_network_services","version_start":null,"version_start_inclusive":null,"version_end":"1.0.1.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"sinema-remote-connect","product_name":"SINEMA Remote Connect","version_start":null,"version_start_inclusive":null,"version_end":"3.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:siemens:sinema_remote_connect:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"sinema-remote-connect-server","product_name":"SINEMA Remote Connect Server","version_start":null,"version_start_inclusive":null,"version_end":"3.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"siplus-net-cp-1543-1-firmware","product_name":"siplus_net_cp_1543-1_firmware","version_start":null,"version_start_inclusive":null,"version_end":"3.0.22","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:siemens:siplus_net_cp_1543-1_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"splunk","vendor_name":"Splunk","product_slug":"universal-forwarder","product_name":"Universal Forwarder","version_start":"8.2.0","version_start_inclusive":true,"version_end":"8.2.12","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*"},{"vendor_slug":"splunk","vendor_name":"Splunk","product_slug":"universal-forwarder","product_name":"Universal Forwarder","version_start":"9.1.0","version_start_inclusive":true,"version_end":"9.1.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://hackerone.com/reports/1223565","source_type":"MISC","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210902-0003/","source_type":"MISC","tags":[]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source_type":"MISC","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","source_type":"MISC","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","source_type":"MISC","tags":[]},{"url":"https://www.debian.org/security/2022/dsa-5197","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","source_type":"MAILING_LIST","tags":["mailing-list"]}],"timeline":[{"type":"published","at":"2021-08-05T20:16:56Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-06-24T00:31:38.771468Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:38.771468Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:38.771468Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:38.771468Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:38.771468Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:38.771468Z","label":"CVSS score revised","source":"vulnrichment"}]}