Vulnerability record · CVE-2022-27779 · published 2 June 2022

CVE-2022-27779: Haxx curl vulnerability

Haxx · Curl

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.

5.3 CVSS 3.1 Medium EPSS 2.7% · top 14.4% CWE-201 · CWE-201

5.3CVSS 3.1 base score, v2 5.0

2.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

11Affected product versions listed by NVD

6References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

11 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Curl Haxx NClustered Data Ontap Netapp NH300s Firmware Netapp NH410s Firmware Netapp NH500s Firmware Netapp NH700s Firmware Netapp NHci Bootstrap Os Netapp NHci Compute Node Netapp NSolidfire \& Hci Management Node Netapp NSolidfire\, Enterprise Sds \& Hci Storage Node Netapp

Universal Forwarder Splunk

References

Link	Tags
https://hackerone.com/reports/1553301	ExploitThird Party Advisory
https://security.gentoo.org/glsa/202212-01	Third Party Advisory
https://security.netapp.com/advisory/ntap-20220609-0009/	Third Party Advisory
https://hackerone.com/reports/1553301	ExploitThird Party Advisory
https://security.gentoo.org/glsa/202212-01	Third Party Advisory
https://security.netapp.com/advisory/ntap-20220609-0009/	Third Party Advisory

Track CVE-2022-27779 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2024-54085AMI MegaRAC SPx BMC authentication bypass via Redfish Host InterfaceAMI's SPx BMC implementation contains an authentication bypass reachable remotely through the Redfish Host Interface, classified as CWE-290 (authenti…KEVEPSS 61%analysed11 Mar 2025 9.0CVE-2021-40438Apache HTTP Server mod_proxy SSRF via crafted URI pathA crafted request URI path can make mod_proxy forward the request to an origin server chosen by the remote user, an SSRF flaw in Apache HTTP Server 2…KEVEPSS 100%analysed16 Sep 2021 8.4CVE-2022-0185Linux Kernel Filesystem Context Heap Buffer OverflowThe legacy_parse_param function in the Linux kernel's Filesystem Context functionality fails to properly verify supplied parameter lengths, causing a…KEVEPSS 25%analysed11 Feb 2022 7.8CVE-2024-1086Linux kernel nf_tables use-after-free allows local privilege escalationThe Linux kernel's netfilter nf_tables component has a use-after-free in nft_verdict_init(), where positive drop errors are accepted and nf_hook_slow…KEVEPSS 28%analysed31 Jan 2024 7.8CVE-2023-4911GNU C Library ld.so GLIBC_TUNABLES heap buffer overflowThe GNU C Library dynamic loader ld.so mishandles the GLIBC_TUNABLES environment variable, causing a heap-based buffer overflow and out-of-bounds wri…KEVEPSS 81%analysed3 Oct 2023 7.8CVE-2023-0386Linux kernel OverlayFS setuid copy privilege escalationA uid mapping bug in the Linux kernel OverlayFS subsystem lets a local user copy a file with capabilities from a nosuid mount into another mount, byp…KEVEPSS 7.9%analysed22 Mar 2023 7.8CVE-2022-0995Linux kernel watch_queue out-of-bounds writeThe Linux kernel's watch_queue event notification subsystem contains an out-of-bounds write (CWE-787) that can overwrite kernel state. A local user c…KEVEPSS 8.8%analysed25 Mar 2022 7.8CVE-2022-0847Linux kernel pipe buffer flaw allows local privilege escalationThe flags member of the new pipe buffer structure was not properly initialized in copy_page_to_iter_pipe and push_pipe, so it could hold stale values…KEVEPSS 93%analysed10 Mar 2022

Source: NIST National Vulnerability Database (record CVE-2022-27779), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.