CVE-2022-27775

Name of the Vulnerable Software and Affected Versions curl versions 7.65.0 through 7.82.0

Description The issue is related to the implementation of the configuration matching function in the curl utility, which does not properly handle IPv6 address zone IDs. This can lead to incorrect connections being made when one transfer uses a zone ID and a subsequent transfer uses a different (or no) zone ID. The vulnerability allows a remote attacker to potentially reuse a connection, leading to information disclosure.

Recommendations For curl versions 7.65.0 through 7.82.0, update to a version that fixes the issue with the configuration matching function to prevent incorrect connections and potential information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.