CVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…
Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jun 2, 2022 · NIST NVD
Detected
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
Oct 14, 2026 · NIST NVD
Updated
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
Affected
- cpe broadcom/fabric operating systemversion unspecified
- cpe debian/debian linux11.0
- cpe haxx/curlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410s firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/solidfire & hci management nodeversion unspecified
- cpe netapp/solidfire & hci storage nodeversion unspecified
- cpe splunk/universal forwarderversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2022-27775
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-27775
30-day exploitation probability 3.3%
first.org - NIST NVDVulnerability recordCVE-2022-27775
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
nvd.nist.gov