

When sending data to an MQTT server, libcurl = 7.20.0 and = 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1724 advisory. Description The version of curl installed on the remote host is prior to 7.79.1-1. Synopsis The remote Amazon Linux 2 host is missing a security update.
