Insecure Connection Processing

🗓️ 20 Aug 2020 04:14:02Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

Insecure handling of connections in libcurl.s

Reporter	Title	Published	Views	Family All 169
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Community Edition docker containers have been updated to fix a security issue in libcurl	4 Feb 202123:53	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2020-8231)	21 Apr 202220:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Curl affects PowerSC (CVE-2020-8231)	1 Feb 202120:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2021-1693)	6 Aug 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2020-1444)	18 Nov 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0078: curl (ALINUX3-SA-2021:0078)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : curl (ALSA-2021:1610)	9 Feb 202200:00	–	nessus

Vulners

Node

focal focalMatch7.68.0-1ubuntu2debian

AND

debian debian_linux

OR

xenial xenialMatch7.47.0-1ubuntu2debian

AND

debian debian_linux

OR

google bionicMatch7.58.0-2ubuntu3debian

AND

debian debian_linux

OR

curl curlMatch7.52.1-5+deb9u10debian

AND

debian debian_linuxMatch9

OR

curl curlMatch7.66.0-r0cpp

AND

alpinelinux alpine_linuxMatch3.10

OR

curl curlMatch7.69.1-r0cpp

AND

alpinelinux alpine_linuxMatch3.12

OR

curl curlMatch7.67.0-r0cpp

AND

alpinelinux alpine_linuxMatch3.11

OR

curl curlMatch7.64.0-r3cpp

AND

alpinelinux alpine_linuxMatch3.9

OR

apache groovyMatch7.68.0-1ubuntu4debian

AND

debian debian_linux

OR

curl curlMatch7.64.0-4+deb10u1debian

AND

debian debian_linuxMatch10

OR

curl curlMatch7.69.0-r0cpp

AND

curl curlMatch7.69.0-r1cpp

AND

curl curlMatch7.69.1-r0cpp

AND

curl curlMatch7.68.0-r0cpp

AND

alpinelinux alpine_linuxMatchedge

OR

libcurl.so libcurl.soRange4.3.0–4.6.0cpp

OR

curl curlMatch7.61.1_14.el8_3.1

OR

curl curlMatch7.61.1_17.el8

OR

curl curlMatch7.61.1_12.el8

OR

curl curlMatch7.61.1_8.el8

OR

curl curlMatch7.61.1_14.el8

OR

curl curlMatch7.61.1_11.el8

Source	Link
curl	www.curl.haxx.se/docs/CVE-2020-8231.html
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
debian	www.debian.org/security/2021/dsa-4881
security	www.security.gentoo.org/glsa/202012-14
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
hackerone	www.hackerone.com/reports/948876
oracle	www.oracle.com/security-alerts/cpuapr2022.html

27 Mar 2024 19:12Current

1Low risk

Vulners AI Score1

CVSS 25

CVSS 3.17.5

EPSS0.00159

libcurl insecure connection multi api curlopt_connect_only software