DeutschShown in its original language — a full translation is planned for a future version.
cURL: Mehrere Schwachstellen
view advisory published 2020-12-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-8286US | high7.5 | — | ||
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. | ||||
| CVE-2020-8285US | high7.5 | — | ||
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. | ||||
| CVE-2020-8284US | low3.7 | — | ||
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract in… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:1610 vom 2021-05-18external
- Red Hat Security Advisory RHSA-2021:2461 vom 2021-06-16external
- Red Hat Security Advisory RHSA-2021:2471 vom 2021-06-17external
- Red Hat Security Advisory RHSA-2021:2472 vom 2021-06-17external
- Red Hat Security Advisory RHSA-2021:2479 vom 2021-06-17external
- Red Hat Security Advisory RHSA-2021:2532 vom 2021-06-23external
- Red Hat Security Advisory RHSA-2021:2543 vom 2021-06-24external
- Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan