ALPINE-CVE-2022-32208 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2022-32208 PUBLISHED CVSS 5.900000095367432 MEDIUM

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.

Risk Scores

CVSS v3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Alpine:v3.23	curl	7.21.7-r0, 7.21.6-r0, 7.21.5-r1
Alpine:v3.17	curl	7.21.7-r0, 0, 7.19.2-r0
Alpine:v3.22	curl	7.76.0-r0, 7.76.1-r0, 7.77.0-r0
Alpine:v3.20	curl	7.51.0-r1, 7.50.3-r1, 7.50.3-r0
Alpine:v3.21	curl	7.34.0-r1, 7.21.7-r1, 7.21.7-r0
Alpine:v3.13	curl	7.46.0-r2, 7.46.0-r1, 7.46.0-r0
Alpine:v3.15	curl	7.52.1-r1, 0, 7.19.2-r0
Alpine:v3.19	curl	0, 7.83.1-r0, 7.83.0-r0
Alpine:v3.16	curl	7.83.1-r1, 7.83.1-r0, 7.83.0-r0
Alpine:v3.18	curl	7.45.0-r0, 7.83.1-r1, 7.83.1-r0
Alpine:v3.14	curl	7.79.1-r1, 7.79.1-r0, 7.79.0-r0

Timeline

Jul 7, 2022 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2022-32208 advisory

Open in Interactive Console →