CVE-2022-27778: curl 7.83.0; +14 more affected products

Affected technology

curl · 7.83.0
haxx

active iq unified manager · Version not applicable in the source CPE
netapp

clustered data ontap · Version not applicable in the source CPE
netapp

oncommand insight · Version not applicable in the source CPE
netapp

oncommand workflow automation · Version not applicable in the source CPE
netapp

snapcenter · Version not applicable in the source CPE
netapp

solidfire & hci management node · Version not applicable in the source CPE
netapp

h300s firmware · Version not applicable in the source CPE
netapp

bh500s firmware · Version not applicable in the source CPE
netapp

h700s firmware · Version not applicable in the source CPE
netapp

h410s firmware · Version not applicable in the source CPE
netapp

hci compute node firmware · Version not applicable in the source CPE
netapp

mysql server · through 5.7.38 (inclusive)
oracle

mysql server · from 8.0.0 (inclusive), through 8.0.29 (inclusive)
oracle

universal forwarder · from 8.2.0 (inclusive), before 8.2.12 (exclusive)
splunk

universal forwarder · from 9.0.0 (inclusive), before 9.0.6 (exclusive)
splunk

universal forwarder · 9.1.0
splunk

https://github.com/curl/curl · fixed in 7.83.1
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.