Findings

CVE-2022-27775

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…

Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 2, 2022 · NIST NVD

    Detected

    An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

Affected

  • cpe broadcom/fabric operating systemversion unspecified
  • cpe debian/debian linux11.0
  • cpe haxx/curlversion unspecified
  • cpe netapp/clustered data ontapversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/hci bootstrap osversion unspecified
  • cpe netapp/solidfire & hci management nodeversion unspecified
  • cpe netapp/solidfire & hci storage nodeversion unspecified
  • cpe splunk/universal forwarderversion unspecified

Sources

  • CVE.orgCVE-2022-27775

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-27775

    An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

    nvd.nist.gov

References