Lucene search
F5F5:K15402727HistoryFeb 19, 2021 - 12:00 a.m.
K15402727 : cURL vulnerability CVE-2020-8286
2021-02-1900:00:00
my.f5.com
29
curl
version 7.41.0
version 7.73.0
certificate revocation
ocsp
cve-2020-8286
f5 product
tls certificate
Security Advisory Description
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. (CVE-2020-8286)
Impact
An attacker could provide a forged OCSP response to the F5 product that has made the request with curl, and this fake response could make it appear that a TLS certificate is valid when it may have actually been revoked.
Related
cbl_mariner
cbl_mariner
CVE-2020-8286 affecting package curl 7.68.0-5
2020-12-16 04:51:58
ubuntucve
ubuntucve
CVE-2020-8286
2020-12-09 00:00:00
nvd
nvd
CVE-2020-8286
2020-12-14 20:15:14
cvelist
cvelist
CVE-2020-8286
2020-12-14 19:39:28
cve
cve
CVE-2020-8286
2020-12-14 20:15:14
nessus
nessus
F5 Networks BIG-IP : cURL vulnerability (K15402727)
2021-10-28 00:00:00
EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1003)
2021-01-04 00:00:00
EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1022)
2021-01-04 00:00:00
prion
prion
Input validation
2020-12-14 20:15:00
alpinelinux
alpinelinux
CVE-2020-8286
2020-12-14 20:15:14
redhatcve
redhatcve
CVE-2020-8286
2020-12-09 17:14:51
osv
osv
CVE-2020-8286
2020-12-14 20:15:14
curl - security update
2020-12-18 00:00:00
curl vulnerabilities
2020-12-09 12:10:47
veracode
veracode
Authorization Bypass
2020-12-11 09:15:31
debiancve
debiancve
CVE-2020-8286
2020-12-14 20:15:14
hackerone
hackerone
curl: CVE-2020-8286: Inferior OCSP verification
2020-12-01 20:53:56
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1645)
2021-03-12 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1003)
2021-01-08 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1022)
2021-01-08 00:00:00
ics
ics
Siemens SIMATIC TIM libcurl
2021-06-29 12:00:00
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
freebsd
freebsd
cURL -- Multiple vulnerabilities
2020-12-09 00:00:00
ibm
ibm
suse
suse
Security update for curl (moderate)
2020-12-14 00:00:00
Security update for curl (moderate)
2020-12-13 00:00:00
slackware
slackware
[slackware-security] curl
2020-12-09 21:22:01
fedora
fedora
[SECURITY] Fedora 32 Update: curl-7.69.1-7.fc32
2020-12-21 01:36:25
[SECURITY] Fedora 33 Update: curl-7.71.1-8.fc33
2020-12-15 01:22:19
photon
photon
debian
debian
[SECURITY] [DLA 2500-1] curl security update
2020-12-19 02:59:56
[SECURITY] [DSA 4881-1] curl security update
2021-03-31 09:30:31
rocky
rocky
curl security and bug fix update
2021-05-18 05:39:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2020-12-31 17:32:44
oraclelinux
oraclelinux
curl security and bug fix update
2021-05-25 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2020-12-09 00:00:00
almalinux
almalinux
Moderate: curl security and bug fix update
2021-05-18 05:39:00
cloudfoundry
cloudfoundry
USN-4665-1: curl vulnerabilities | Cloud Foundry
2021-01-12 00:00:00
amazon
amazon
Medium: curl
2021-08-04 20:32:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-12-23 00:00:00
redhat
redhat
apple
apple
About the security content of Security Update 2021-003 Mojave
2021-04-26 00:00:00
About the security content of Security Update 2021-002 Catalina
2021-04-26 00:00:00
About the security content of macOS Big Sur 11.3
2021-04-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00