Cyber Resilience

CVE-2021-22945

CriticalPublic PoC

Published: 23 September 2021

Published
23 September 2021
Modified
09 June 2025
KEV Added
—
Patch
—
CVSS Score v3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score 0.0035 58.1th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-22945 is a critical-severity Double Free (CWE-415) vulnerability in Splunk Universal Forwarder. Its CVSS base score is 9.1 (Critical).

Operationally, ranked in the top 41.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also…

more

free it *again*.

CWE(s)
CWE-415

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

haxx
libcurl
7.73.0 — 7.78.0
fedoraproject
fedora
33, 35
netapp
cloud backup
all versions
netapp
clustered data ontap
all versions
oracle
mysql server
5.7.0 — 5.7.35 · 8.0.0 — 8.0.26
netapp
h300s firmware
all versions
netapp
h500s firmware
all versions
netapp
h700s firmware
all versions
netapp
h300e firmware
all versions
netapp
h500e firmware
all versions
+7 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References