CVE-2022-27781
libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server…
Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl
libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
Timeline
Detection, updates, and resolution for this record.
Jun 2, 2022 · NIST NVD
Detected
libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
Oct 14, 2026 · NIST NVD
Updated
libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
Affected
- cpe debian/debian linux10.0
- cpe debian/debian linux11.0
- cpe haxx/curlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410s firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/hci compute nodeversion unspecified
- cpe netapp/solidfire & hci management nodeversion unspecified
- cpe netapp/solidfire, enterprise sds & hci storage nodeversion unspecified
Sources
- CVE.orgCVE-2022-27781
Official CVE identifier
cve.org - NIST NVDCVE-2022-27781
libcurl provides the option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve
nvd.nist.gov