K85235351: cURL and libcurl vulnerability CVE-2016-8624

🗓️ 21 Feb 2023 18:33:21Reported by f5Type

f5🔗 my.f5.com👁 35 Views

cURL and libcurl vulnerability CVE-2016-8624. Incorrect parsing of URL authority component can lead to connecting to a different hos

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL affect IBM Workload Scheduler	17 Jun 201815:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL component shipped with IBM Rational ClearCase (CVE-2016-8624, CVE-2016-8625)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS	1 May 202007:21	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	2 Nov 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
Tenable Nessus	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	9 Dec 201600:00	–	nessus

Vulners

Node

f5 big-ip_ltmMatch13.0.0

OR

f5 big-ip_ltmRange12.0.0–12.1.2

OR

f5 big-ip_ltmRange11.4.0–11.6.1

OR

f5 big-ip_ltmMatch11.2.1

OR

f5 big-ip_aamMatch13.0.0

OR

f5 big-ip_aamRange12.0.0–12.1.2

OR

f5 big-ip_aamRange11.4.0–11.6.1

OR

f5 big-ip_afmMatch13.0.0

OR

f5 big-ip_afmRange12.0.0–12.1.2

OR

f5 big-ip_afmRange11.4.0–11.6.1

OR

f5 big-ip_analyticsMatch13.0.0

OR

f5 big-ip_analyticsRange12.0.0–12.1.2

OR

f5 big-ip_analyticsRange11.4.0–11.6.1

OR

f5 big-ip_analyticsMatch11.2.1

OR

f5 big-ip_apmMatch13.0.0

OR

f5 big-ip_apmRange12.0.0–12.1.2

OR

f5 big-ip_apmRange11.4.0–11.6.1

OR

f5 big-ip_apmMatch11.2.1

OR

f5 big-ip_asmMatch13.0.0

OR

f5 big-ip_asmRange12.0.0–12.1.2

OR

f5 big-ip_asmRange11.4.0–11.6.1

OR

f5 big-ip_asmMatch11.2.1

OR

f5 big-ip_dnsMatch13.0.0

OR

f5 big-ip_dnsRange12.0.0–12.1.2

OR

f5 big-ip_edge_gatewayMatch11.2.1

OR

f5 big-ip_gtmRange11.4.0–11.6.1

OR

f5 big-ip_gtmMatch11.2.1

OR

f5 big-ip_link_controllerMatch13.0.0

OR

f5 big-ip_link_controllerRange12.0.0–12.1.2

OR

f5 big-ip_link_controllerRange11.4.0–11.6.1

OR

f5 big-ip_link_controllerMatch11.2.1

OR

f5 big-ip_pemMatch13.0.0

OR

f5 big-ip_pemRange12.0.0–12.1.2

OR

f5 big-ip_pemRange11.4.0–11.6.1

OR

f5 big-ip_psmRange11.4.0–11.4.1

OR

f5 big-ip_webacceleratorMatch11.2.1

OR

f5 big-ip_websafeMatch13.0.0

OR

f5 big-ip_websafeRange12.0.0–12.1.2

OR

f5 big-ip_websafeRange11.6.0–11.6.1

OR

f5 arxRange6.2.0–6.4.0

OR

f5 enterprise_managerMatch3.1.1

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_centralized_managementRange5.0.0–5.1.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

OR

f5 iworkflowRange2.0.0–2.1.0

OR

f5 traffix_sdcRange5.0.0–5.1.0

OR

f5 traffix_sdcRange4.0.0–4.4.0

21 Feb 2023 18:33Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 35.3 - 7.5

EPSS0.01363

SSVC

curl libcurl vulnerability cve-2016-8624 parsing url authority component connecting different host security implications allowed domains exploit