---

ASA-202106-4 - log back

ASA-202106-4 edited at 03 Jun 2021 08:46:47
Workaround	- - CVE-2021-22898 can be mitigated by avoiding to use the -t command line option and CURLOPT_TELNETOPTIONS. + - CVE-2021-22898 can be mitigated by avoiding to use the -t command + line option and CURLOPT_TELNETOPTIONS. - No known workaround exists for CVE-2021-22901.
Impact	- curl could disclose potentially sensitive memory information to a remote server over Telnet when an uncommon option is used. Additionally, a remote attacker could cause arbitrary code execution through a crafted TLS handshake. + curl could disclose potentially sensitive memory information to a remote server over Telnet when an uncommon option is used. + Additionally, a remote attacker could cause arbitrary code execution through a crafted TLS handshake.

ASA-202106-4 edited at 01 Jun 2021 16:36:20
Workaround	+ - CVE-2021-22898 can be mitigated by avoiding to use the -t command line option and CURLOPT_TELNETOPTIONS. + - No known workaround exists for CVE-2021-22901.
Impact	+ curl could disclose potentially sensitive memory information to a remote server over Telnet when an uncommon option is used. Additionally, a remote attacker could cause arbitrary code execution through a crafted TLS handshake.

ASA-202106-4 created at 01 Jun 2021 16:29:41