VDB
ALPINE-CVE-2022-27775
ALPINE-CVE-2022-27775
PUBLISHED
CVSS 7.5 HIGH
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.21 | curl | 7.21.7-r2, 7.65.0, 7.65.0 |
| Alpine:v3.24 | curl | 7.65.0, 7.65.0 |
| Alpine:v3.17 | curl | 7.19.4-r0, 7.65.0, 7.65.0 |
| Alpine:v3.16 | curl | 7.19.2-r1, 7.65.0, 7.65.0 |
| Alpine:v3.20 | curl | 7.45.0-r0, 7.46.0-r0, 7.46.0-r1 |
| Alpine:v3.18 | curl | 7.58.0-r0, 7.21.3-r0, 0 |
| Alpine:v3.22 | curl | 7.21.0-r0, 0, 7.19.2-r0 |
| Alpine:v3.15 | curl | 7.69.1-r0, 7.62.0-r0, 7.62.0-r1 |
| Alpine:v3.19 | curl | 7.19.7-r0, 7.59.0-r1, 7.53.1-r1 |
| Alpine:v3.12 | curl | 7.50.0-r0, 7.50.1-r0, 7.50.2-r0 |
| Alpine:v3.23 | curl | 0, 7.21.7-r0, 7.27.0-r0 |
| Alpine:v3.14 | curl | 7.61.1-r0, 7.72.0-r0, 7.71.1-r0 |
| Alpine:v3.13 | curl | 7.72.0-r0, 7.73.0-r0, 7.74.0-r0 |
Timeline
- Jun 2, 2022 CVE Published
- Jul 8, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch