Lucene search
HackeroneCVELIST:CVE-2020-8231HistoryDec 14, 2020 - 7:39 p.m.
CVE-2020-8231
2020-12-1419:39:19
CWE-416
hackerone
www.cve.org
1
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
CNA Affected
[
{
"product": "https://github.com/curl/curl",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "libcurl 7.29.0 to and including 7.71.1"
}
]
}
]References
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
curl.haxx.se/docs/CVE-2020-8231.html
hackerone.com/reports/948876
lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
security.gentoo.org/glsa/202012-14
www.debian.org/security/2021/dsa-4881
www.oracle.com/security-alerts/cpuapr2022.html
Related
suse
suse
Security update for curl (moderate)
2020-09-05 00:00:00
Security update for curl (moderate)
2020-09-21 00:00:00
Security update for curl (moderate)
2020-09-07 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2446-1)
2020-09-04 00:00:00
Puppet Agent 5.x < 5.5.22 / 6.x < 6.19.0 Vulnerability
2023-11-01 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : curl vulnerability (USN-4466-1)
2020-08-20 00:00:00
slackware
slackware
[slackware-security] curl
2020-08-19 18:21:41
fedora
fedora
[SECURITY] Fedora 31 Update: curl-7.66.0-3.fc31
2020-09-03 16:27:08
[SECURITY] Fedora 32 Update: curl-7.69.1-5.fc32
2020-08-21 01:11:30
ubuntucve
ubuntucve
CVE-2020-8231
2020-08-19 00:00:00
veracode
veracode
Insecure Connection Processing
2020-08-20 04:14:02
openvas
openvas
Fedora: Security Advisory for curl (FEDORA-2020-da832cb434)
2020-08-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2444-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2446-1)
2021-06-09 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2020-8231)
2022-04-21 20:41:52
Security Bulletin: Watson Machine Learning Community Edition docker containers have been updated to fix a security issue in libcurl
2021-02-04 23:53:58
Security Bulletin: Vulnerability in Curl affects PowerSC (CVE-2020-8231)
2021-02-01 20:57:29
osv
osv
CVE-2020-8231
2020-12-14 20:15:13
curl - security update
2020-09-26 00:00:00
Moderate: curl security and bug fix update
2021-05-18 05:39:00
ubuntu
ubuntu
curl vulnerability
2020-08-20 00:00:00
curl vulnerability
2020-08-19 00:00:00
curl vulnerabilities
2020-12-09 00:00:00
amazon
amazon
Low: curl
2020-11-14 01:22:00
Medium: curl
2021-08-04 20:32:00
photon
photon
prion
prion
Code injection
2020-12-14 20:15:00
debiancve
debiancve
CVE-2020-8231
2020-12-14 20:15:13
debian
debian
[SECURITY] [DLA 2382-1] curl security update
2020-09-26 15:33:03
[SECURITY] [DSA 4881-1] curl security update
2021-03-31 09:30:31
nvd
nvd
CVE-2020-8231
2020-12-14 20:15:13
freebsd
freebsd
curl -- expired pointer dereference vulnerability
2020-08-19 00:00:00
cloudfoundry
cloudfoundry
USN-4466-1: curl vulnerability | Cloud Foundry
2020-09-24 00:00:00
USN-4665-1: curl vulnerabilities | Cloud Foundry
2021-01-12 00:00:00
alpinelinux
alpinelinux
CVE-2020-8231
2020-12-14 20:15:13
cbl_mariner
cbl_mariner
CVE-2020-8231 affecting package curl 7.68.0-5
2021-01-11 21:49:35
hackerone
hackerone
curl: Connect-only connections can use the wrong connection
2020-07-31 20:57:36
cve
cve
CVE-2020-8231
2020-12-14 20:15:13
redhatcve
redhatcve
CVE-2020-8231
2020-08-19 11:12:11
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-12-23 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: curl security and bug fix update
2021-05-18 05:39:00
rocky
rocky
curl security and bug fix update
2021-05-18 05:39:00
oraclelinux
oraclelinux
curl security and bug fix update
2021-05-25 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2020-12-31 17:32:44
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00