Description
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
curl curl
Default version status: unaffected
7.20.0 to < 8.14.2affected8.15.0 to < 8.16.1affected8.17.0 to < 8.20.0affected
curl curl
Default version status: unaffected
ec3bb8f727405642a471b4b1b9eb0118fc003104 to < 507e7be573b0a76fca597b75ff7cb27a66e7d865affected
curl curl
Default version status: unaffected
8.19.0affected8.18.0affected8.17.0affected8.16.0affected8.15.0affected8.14.1affected8.14.0affected8.13.0affected8.12.1affected8.12.0affected8.11.1affected8.11.0affected8.10.1affected8.10.0affected8.9.1affected8.9.0affected8.8.0affected8.7.1affected8.7.0affected8.6.0affected8.5.0affected8.4.0affected8.3.0affected8.2.1affected8.2.0affected8.1.2affected8.1.1affected8.1.0affected8.0.1affected8.0.0affected7.88.1affected7.88.0affected7.87.0affected7.86.0affected7.85.0affected7.84.0affected7.83.1affected7.83.0affected7.82.0affected7.81.0affected7.80.0affected7.79.1affected7.79.0affected7.78.0affected7.77.0affected7.76.1affected7.76.0affected7.75.0affected7.74.0affected7.73.0affected7.72.0affected7.71.1affected7.71.0affected7.70.0affected7.69.1affected7.69.0affected7.68.0affected7.67.0affected7.66.0affected7.65.3affected7.65.2affected7.65.1affected7.65.0affected7.64.1affected7.64.0affected7.63.0affected7.62.0affected7.61.1affected7.61.0affected7.60.0affected7.59.0affected7.58.0affected7.57.0affected7.56.1affected7.56.0affected7.55.1affected7.55.0affected7.54.1affected7.54.0affected7.53.1affected7.53.0affected7.52.1affected7.52.0affected7.51.0affected7.50.3affected7.50.2affected7.50.1affected7.50.0affected7.49.1affected7.49.0affected7.48.0affected7.47.1affected7.47.0affected7.46.0affected7.45.0affected7.44.0affected7.43.0affected7.42.1affected7.42.0affected7.41.0affected7.40.0affected7.39.0affected7.38.0affected7.37.1affected7.37.0affected7.36.0affected7.35.0affected7.34.0affected7.33.0affected7.32.0affected7.31.0affected7.30.0affected7.29.0affected7.28.1affected7.28.0affected7.27.0affected7.26.0affected7.25.0affected7.24.0affected7.23.1affected7.23.0affected7.22.0affected7.21.7affected7.21.6affected7.21.5affected7.21.4affected7.21.3affected7.21.2affected7.21.1affected7.21.0affected7.20.1affected7.20.0affected