CVE-2022-27775: broadcom fabric_operating_system
CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2022-27775RHSA-2022:8299UBUNTU-CVE-2022-27775DEBIAN-CVE-2022-27775
Published 01-06-2022Last modified 14-10-2026
Vulnerability summary
CVE-2022-27775 is a high (CVSS 7.5) vulnerability in broadcom fabric_operating_system. EPSS estimates a 3.34% chance of exploitation in the next 30 days, higher than 88.5% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
3.34%
0%100%
Low · +0.19 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 01-06-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVSS metrics
7 scores · 6 sources · 2 versionsHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSourcesAll 6 agree
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
3.34%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
+0.19 pp
From 3.15% on 18-09-2026
18-09-202618-10-2026
EPSS score3.34%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hackerone.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat10 products
- curl< 0:7.76.1-19.el9
- curl-debuginfo< 0:7.76.1-19.el9
- curl-debugsource< 0:7.76.1-19.el9
- curl-minimal< 0:7.76.1-19.el9
- curl-minimal-debuginfo< 0:7.76.1-19.el9
Netapp8 products
Debian2 products
- curl< 7.83.0-1
- debian_linuxEOL11.0
Alpine1 product
- curl≥ 7.65.0, < 7.79.1-r1 | ≥ 7.65.0, < 7.80.0-r1 | ≥ 7.65.0, < 7.83.0-r0
Broadcom1 product
Brocade1 product
Haxx1 product
- curl≥ 7.65.0, ≤ 7.82.0
Splunk1 product
- universal_forwarder≥ 8.2.0, < 8.2.12 | ≥ 9.0.0, < 9.0.6 | 9.1.0
Ubuntu1 product
- curl< 7.68.0-1ubuntu2.10 | < 7.81.0-1ubuntu1.1
9 vendors · 26 products
References
18 links- security.netapp.com/advisory/ntap-20220609-0008/Third Party Advisory
