Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2020:5002
HistoryNov 18, 2020 - 5:30 p.m.

curl, libcurl security update

2020-11-1817:30:30
CentOS Project
lists.centos.org
379
centos errata
security advisory
cesa-2020:5002
curl
libcurl
http
ftp
ldap
cve-2020-8177
cvss score
acknowledgments
merged security bulletin
affected packages
libcurl-devel
upstream details
red hat advisory

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

JSON

CentOS Errata and Security Advisory CESA-2020:5002

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • curl: Incorrect argument check can allow remote servers to overwrite local files (CVE-2020-8177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2020-November/085964.html

Affected packages:
curl
libcurl
libcurl-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:5002

Related

nessus 52
openvas 26
prion 1
f5 1
veracode 1
redos 22
redhat 19
suse 2
cbl_mariner 1
debiancve 1
amazon 2
cve 1
hackerone 2
osv 3
ubuntucve 1
cvelist 1
nvd 1
debian 2
redhatcve 1
alpinelinux 1
oraclelinux 2
freebsd 1
cloudfoundry 1
mageia 1
photon 7
ubuntu 1
gentoo 1
fedora 3
ibm 10
slackware 1
ics 2
oracle 1
nessus
nessus
Photon OS 1.0: Curl PHSA-2020-1.0-0304
2020-06-29 00:00:00
Amazon Linux AMI : curl (ALAS-2020-1411)
2020-07-30 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2020-1907)
2020-08-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1734-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-2456)
2020-11-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1735-1)
2021-04-19 00:00:00
prion
prion
Input validation
2020-12-14 20:15:00
f5
f5
K000133094 : cURL vulnerability CVE-2020-8177
2023-03-21 00:00:00
veracode
veracode
Arbitrary File Overwrite
2020-06-25 05:16:51
redos
redos
ROS-2-634
2021-09-08 00:00:00
ROS-2-1171
2021-09-08 00:00:00
ROS-2-798
2021-09-08 00:00:00
redhat
redhat
(RHSA-2020:5002) Moderate: curl security update
2020-11-10 09:37:34
(RHSA-2020:5417) Moderate: curl security and bug fix update
2020-12-15 08:07:44
(RHSA-2020:4599) Moderate: curl security and bug fix update
2020-11-03 12:19:12
suse
suse
Security update for curl (important)
2020-06-30 00:00:00
Security update for curl (important)
2020-06-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-8177 affecting package curl 7.68.0-5
2021-01-11 21:49:35
debiancve
debiancve
CVE-2020-8177
2020-12-14 20:15:13
amazon
amazon
Medium: curl
2020-07-14 02:30:00
Medium: curl
2020-07-28 17:21:00
cve
cve
CVE-2020-8177
2020-12-14 20:15:13
hackerone
hackerone
curl: curl overwrite local file with -J
2020-05-30 13:08:39
curl: curl overwrites local file with -J option if file non-readable, but file writable.
2020-07-18 00:52:32
osv
osv
curl - security update
2020-07-28 00:00:00
CVE-2020-8177
2020-12-14 20:15:13
curl - security update
2021-03-30 00:00:00
ubuntucve
ubuntucve
CVE-2020-8177
2020-06-24 00:00:00
cvelist
cvelist
CVE-2020-8177
2020-12-14 19:42:16
nvd
nvd
CVE-2020-8177
2020-12-14 20:15:13
debian
debian
[SECURITY] [DLA 2295-1] curl security update
2020-07-28 20:29:35
[SECURITY] [DSA 4881-1] curl security update
2021-03-31 09:30:31
redhatcve
redhatcve
CVE-2020-8177
2020-06-26 13:50:53
alpinelinux
alpinelinux
CVE-2020-8177
2020-12-14 20:15:13
oraclelinux
oraclelinux
curl security and bug fix update
2020-11-10 00:00:00
curl security update
2020-11-12 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2020-06-24 00:00:00
cloudfoundry
cloudfoundry
USN-4402-1: curl vulnerabilities | Cloud Foundry
2020-07-22 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2020-07-05 22:48:23
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0255
2020-06-26 00:00:00
Important Photon OS Security Update - PHSA-2020-0106
2020-06-25 00:00:00
Important Photon OS Security Update - PHSA-2020-0255
2020-06-26 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2020-06-24 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-07-26 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: curl-7.69.1-4.fc32
2020-06-27 02:08:07
[SECURITY] Fedora 32 Update: mingw-curl-7.71.1-1.fc32
2020-08-05 01:20:49
[SECURITY] Fedora 31 Update: curl-7.66.0-2.fc31
2020-07-10 01:01:54
ibm
ibm
Security Bulletin: cURL vulnerabilities CVE-2020-8169 CVE-2020-8177 impact IBM Aspera High-Speed Transfer Server 3.9.6.2 and earlier and Aspera High-Speed Transfer Endpoint 3.9.6.2 and earlier
2020-12-11 18:03:35
Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8169, CVE-2020-8177)
2020-10-23 20:38:54
Security Bulletin: IBM Cloud Private is vulnerable to cURL vulnerabilities (CVE-2020-8169, CVE-2020-8177)
2021-02-26 13:18:21
slackware
slackware
[slackware-security] curl
2020-06-24 20:40:25
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

JSON
Related for CESA-2020:5002
nessus52openvas26prion1f51veracode1redos22redhat19suse2cbl_mariner1debiancve1amazon2cve1hackerone2osv3ubuntucve1cvelist1nvd1debian2redhatcve1alpinelinux1oraclelinux2freebsd1cloudfoundry1mageia1photon7ubuntu1gentoo1fedora3ibm10slackware1ics2oracle1