ZeroDay Findings
Sign inSign up

Findings

CVE-2022-27782

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…

Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 2, 2022 · NIST NVD

    Detected

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

  2. Oct 14, 2026 · NIST NVD

    Updated

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux11.0
  • cpe haxx/curlversion unspecified
  • cpe splunk/universal forwarderversion unspecified
  • cpe splunk/universal forwarder9.1.0

Sources

  • CVE.orgVulnerability recordCVE-2022-27782

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-27782

    30-day exploitation probability 3.1%

    first.org
  • NIST NVDVulnerability recordCVE-2022-27782

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, s

    nvd.nist.gov

References

CVE-2022-27782 · ZeroDay Findings