curl: FTP PASV command response can cause curl to connect to arbitrary host

🗓️ 18 May 2021 15:28:08Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 1 Views

FTP PASV response can cause curl to connect to arbitrary host via user URL, exposing services.

Reporter	Title	Published	Views	Family All 190
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286)	15 Mar 202117:09	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)	4 Jun 202116:40	–	ibm
IBM Security Bulletins	Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)	4 Jun 202101:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability within libcurl (CVE-2020-8284)	19 May 202111:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (Multiple CVEs)	22 Apr 202212:50	–	ibm
FreeBSD	cURL -- Multiple vulnerabilities	9 Dec 202000:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2021-1693)	6 Aug 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0078: curl (ALINUX3-SA-2021:0078)	14 May 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	aarch64	curl	0:7.61.1-18.el8	curl-0:7.61.1-18.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	curl	0:7.61.1-18.el8	curl-0:7.61.1-18.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	curl	0:7.61.1-18.el8	curl-0:7.61.1-18.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	curl	0:7.61.1-18.el8	curl-0:7.61.1-18.el8.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	curl-debuginfo	0:7.61.1-18.el8	curl-debuginfo-0:7.61.1-18.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	curl-debuginfo	0:7.61.1-18.el8	curl-debuginfo-0:7.61.1-18.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	curl-debuginfo	0:7.61.1-18.el8	curl-debuginfo-0:7.61.1-18.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	curl-debuginfo	0:7.61.1-18.el8	curl-debuginfo-0:7.61.1-18.el8.x86_64.rpm
Red Hat Enterprise Linux	8	any	curl-debuginfo	0:7.61.1-18.el8.i686	curl-debuginfo-0:7.61.1-18.el8.i686.noarch.rpm
Red Hat Enterprise Linux	8	aarch64	curl-debugsource	0:7.61.1-18.el8	curl-debugsource-0:7.61.1-18.el8.aarch64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2020-8284
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
curl	www.curl.se/docs/CVE-2020-8284.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8284
cve	www.cve.org/CVERecord

16 Apr 2026 15:33Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.13.7

CVSS 24.3

EPSS0.00083

SSVC

Passive mode response Arbitrary host connection User supplied URL Service banner extraction Port scanning Private services exposure Curl information exposure Malicious server attack