ZeroDay Findings
Sign inSign up

Findings

CVE-2022-27782

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…

Published Jun 2, 2022 · updated Oct 14, 2026 · haxx curl

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 2, 2022 · NIST NVD

    Detected

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

  2. Oct 14, 2026 · NIST NVD

    Updated

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux11.0
  • cpe haxx/curlversion unspecified
  • cpe splunk/universal forwarderversion unspecified
  • cpe splunk/universal forwarder9.1.0

Sources

  • CVE.orgCVE-2022-27782

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2022-27782

    libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, s

    nvd.nist.gov

References