mirror/curl - curl - Collaboration & Inovation

mirror/curl

Fork 0

mirror of https://github.com/curl/curl.git synced 2024-12-27 06:59:43 +08:00

Commit Graph

Author	SHA1	Message	Date
Patrick Monnerat	8ef147c436	ftp,imap,pop3,smtp: reject STARTTLS server response pipelining If a server pipelines future responses within the STARTTLS response, the former are preserved in the pingpong cache across TLS negotiation and used as responses to the encrypted commands. This fix detects pipelined STARTTLS responses and rejects them with an error. CVE-2021-22947 Bug: https://curl.se/docs/CVE-2021-22947.html	2021-09-13 16:51:31 +02:00

Author

SHA1

Message

Date

Patrick Monnerat

8ef147c436

ftp,imap,pop3,smtp: reject STARTTLS server response pipelining

If a server pipelines future responses within the STARTTLS response, the
former are preserved in the pingpong cache across TLS negotiation and
used as responses to the encrypted commands.

This fix detects pipelined STARTTLS responses and rejects them with an
error.

CVE-2021-22947

Bug: https://curl.se/docs/CVE-2021-22947.html

2021-09-13 16:51:31 +02:00

1 Commits