← Database

CVE-2022-27781

HIGH CVSS: 7.5 Published: 2022-06-02 Modified: 2026-06-17

Description

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

Affected Platforms

Netapp H410SNetapp Solidfire\, Enterprise Sds \& Hci Storage NodeNetapp H300S FirmwareNetapp Hci Compute NodeDebian Debian LinuxNetapp Clustered Data OntapNetapp H300SNetapp H700S FirmwareNetapp H410S FirmwareNetapp Solidfire \& Hci Management Node

Weakness Type

CWE-400, CWE-835

References