Lucene search

CVE-2020-8231

🗓️ 14 Dec 2020 20:13:15Reported by hackeroneType

cve🔗 web.nvd.nist.gov👁 345 Views🌐 6 Media mentions

libcurl 7.29.0 through 7.71.1 Dangling Pointer Vulnerabilit

Reporter	Title	Published	Views	Family All 137
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Community Edition docker containers have been updated to fix a security issue in libcurl	4 Feb 202123:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2020-8231)	21 Apr 202220:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Curl affects PowerSC (CVE-2020-8231)	1 Feb 202120:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
OSV	CVE-2020-8231	14 Dec 202020:15	–	osv
OSV	curl - security update	26 Sep 202000:00	–	osv
OSV	Red Hat Security Advisory: curl security and bug fix update	16 Sep 202404:59	–	osv
OSV	Moderate: curl security and bug fix update	18 May 202105:39	–	osv

Nvd

Vulners

Node

haxx libcurlRange7.29.0–7.71.1

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Node

debian debian_linuxMatch10.0

Node

oracle communications_cloud_native_core_policyMatch1.14.0

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "product": "https://github.com/curl/curl",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "libcurl 7.29.0 to and including 7.71.1"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/948876
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
security	www.security.gentoo.org/glsa/202012-14
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
oracle	www.oracle.com/security-alerts/cpuapr2022.html
curl	www.curl.haxx.se/docs/CVE-2020-8231.html
debian	www.debian.org/security/2021/dsa-4881

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2020 20:15Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.004

CWE-416