Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:1610
HistoryMay 18, 2021 - 5:39 a.m.

(RHSA-2021:1610) Moderate: curl security and bug fix update

2021-05-1805:39:00
access.redhat.com
16

0.007 Low

EPSS

Percentile

80.6%

JSON

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

  • curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)

  • curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)

  • curl: Inferior OCSP verification (CVE-2020-8286)

  • curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8i686libcurl-devel< 7.61.1-18.el8libcurl-devel-7.61.1-18.el8.i686.rpm
RedHat8x86_64curl-debugsource< 7.61.1-18.el8curl-debugsource-7.61.1-18.el8.x86_64.rpm
RedHat8x86_64libcurl-minimal-debuginfo< 7.61.1-18.el8libcurl-minimal-debuginfo-7.61.1-18.el8.x86_64.rpm
RedHat8i686curl-debugsource< 7.61.1-18.el8curl-debugsource-7.61.1-18.el8.i686.rpm
RedHat8aarch64libcurl-minimal-debuginfo< 7.61.1-18.el8libcurl-minimal-debuginfo-7.61.1-18.el8.aarch64.rpm
RedHat8x86_64curl< 7.61.1-18.el8curl-7.61.1-18.el8.x86_64.rpm
RedHat8x86_64libcurl-minimal< 7.61.1-18.el8libcurl-minimal-7.61.1-18.el8.x86_64.rpm
RedHat8s390xlibcurl-minimal-debuginfo< 7.61.1-18.el8libcurl-minimal-debuginfo-7.61.1-18.el8.s390x.rpm
RedHat8ppc64lelibcurl-minimal< 7.61.1-18.el8libcurl-minimal-7.61.1-18.el8.ppc64le.rpm
RedHat8ppc64lecurl-debuginfo< 7.61.1-18.el8curl-debuginfo-7.61.1-18.el8.ppc64le.rpm
Rows per page:
1-10 of 441

Related

rocky 1
nessus 68
ubuntu 4
oraclelinux 1
mageia 1
openvas 43
gentoo 1
osv 9
amazon 2
almalinux 1
cloudfoundry 2
freebsd 2
ibm 7
photon 6
fedora 4
suse 5
slackware 2
debian 3
redhat 2
f5 3
ubuntucve 3
prion 3
cbl_mariner 3
nvd 3
redhatcve 3
veracode 3
debiancve 2
hackerone 2
alpinelinux 4
cve 3
cvelist 3
rocky
rocky
curl security and bug fix update
2021-05-18 05:39:00
nessus
nessus
Oracle Linux 8 : curl (ELSA-2021-1610)
2021-05-26 00:00:00
GLSA-202012-14 : cURL: Multiple vulnerabilities
2020-12-24 00:00:00
Rocky Linux 8 : curl (RLSA-2021:1610)
2023-11-07 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2020-12-09 00:00:00
curl vulnerabilities
2020-12-09 00:00:00
curl vulnerability
2020-08-20 00:00:00
oraclelinux
oraclelinux
curl security and bug fix update
2021-05-25 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2020-12-31 17:32:44
openvas
openvas
Ubuntu: Security Advisory (USN-4665-1)
2020-12-10 00:00:00
Mageia: Security Advisory (MGASA-2020-0482)
2022-01-28 00:00:00
Slackware: Security Advisory (SSA:2020-344-01)
2022-04-21 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-12-23 00:00:00
osv
osv
Moderate: curl security and bug fix update
2021-05-18 05:39:00
curl vulnerabilities
2020-12-09 12:10:47
curl - security update
2020-12-18 00:00:00
amazon
amazon
Medium: curl
2021-08-04 20:32:00
Low: curl
2020-11-14 01:22:00
almalinux
almalinux
Moderate: curl security and bug fix update
2021-05-18 05:39:00
cloudfoundry
cloudfoundry
USN-4665-1: curl vulnerabilities | Cloud Foundry
2021-01-12 00:00:00
USN-4466-1: curl vulnerability | Cloud Foundry
2020-09-24 00:00:00
freebsd
freebsd
cURL -- Multiple vulnerabilities
2020-12-09 00:00:00
curl -- expired pointer dereference vulnerability
2020-08-19 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (Multiple CVEs)
2022-04-22 12:50:25
Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)
2021-06-04 16:40:33
Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)
2021-06-04 01:09:08
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0346
2020-12-10 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0304
2020-12-10 00:00:00
Important Photon OS Security Update - PHSA-2020-0346
2020-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: curl-7.69.1-7.fc32
2020-12-21 01:36:25
[SECURITY] Fedora 33 Update: curl-7.71.1-8.fc33
2020-12-15 01:22:19
[SECURITY] Fedora 32 Update: curl-7.69.1-5.fc32
2020-08-21 01:11:30
suse
suse
Security update for curl (moderate)
2020-12-13 00:00:00
Security update for curl (moderate)
2020-12-14 00:00:00
Security update for curl (moderate)
2020-09-05 00:00:00
slackware
slackware
[slackware-security] curl
2020-12-09 21:22:01
[slackware-security] curl
2020-08-19 18:21:41
debian
debian
[SECURITY] [DLA 2500-1] curl security update
2020-12-19 02:59:56
[SECURITY] [DSA 4881-1] curl security update
2021-03-31 09:30:31
[SECURITY] [DLA 2382-1] curl security update
2020-09-26 15:33:03
redhat
redhat
(RHSA-2021:2471) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
2021-06-17 11:31:22
(RHSA-2021:2472) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
2021-06-17 11:33:18
f5
f5
K61186963 : cURL vulnerability CVE-2020-8285
2021-02-19 00:00:00
K15402727 : cURL vulnerability CVE-2020-8286
2021-02-19 00:00:00
K63525058 : cURL vulnerability CVE-2020-8284
2021-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2020-8285
2020-12-09 00:00:00
CVE-2020-8286
2020-12-09 00:00:00
CVE-2020-8231
2020-08-19 00:00:00
prion
prion
Stack overflow
2020-12-14 20:15:00
Code injection
2020-12-14 20:15:00
Input validation
2020-12-14 20:15:00
cbl_mariner
cbl_mariner
CVE-2020-8285 affecting package curl 7.68.0-5
2020-12-16 04:51:58
CVE-2020-8286 affecting package curl 7.68.0-5
2020-12-16 04:51:58
CVE-2020-8231 affecting package curl 7.68.0-5
2021-01-11 21:49:35
nvd
nvd
CVE-2020-8285
2020-12-14 20:15:13
CVE-2020-8286
2020-12-14 20:15:14
CVE-2020-8231
2020-12-14 20:15:13
redhatcve
redhatcve
CVE-2020-8285
2020-12-09 17:44:56
CVE-2020-8231
2020-08-19 11:12:11
CVE-2020-8286
2020-12-09 17:14:51
veracode
veracode
Insecure Connection Processing
2020-08-20 04:14:02
Denial Of Service (DoS)
2020-12-11 09:19:42
Phishing Attacks
2020-12-11 09:23:25
debiancve
debiancve
CVE-2020-8285
2020-12-14 20:15:13
CVE-2020-8231
2020-12-14 20:15:13
hackerone
hackerone
curl: CVE-2020-8285: FTP wildcard stack overflow
2020-11-27 22:59:28
curl: Connect-only connections can use the wrong connection
2020-07-31 20:57:36
alpinelinux
alpinelinux
CVE-2020-8285
2020-12-14 20:15:13
CVE-2020-8231
2020-12-14 20:15:13
CVE-2020-8286
2020-12-14 20:15:14
cve
cve
CVE-2020-8231
2020-12-14 20:15:13
CVE-2020-8285
2020-12-14 20:15:13
CVE-2020-8286
2020-12-14 20:15:14
cvelist
cvelist
CVE-2020-8285
2020-12-14 19:39:04
CVE-2020-8231
2020-12-14 19:39:19
CVE-2020-8286
2020-12-14 19:39:28

0.007 Low

EPSS

Percentile

80.6%

JSON
Related for RHSA-2021:1610
rocky1nessus68ubuntu4oraclelinux1mageia1openvas43gentoo1osv9amazon2almalinux1cloudfoundry2freebsd2ibm7photon6fedora4suse5slackware2debian3redhat2f53ubuntucve3prion3cbl_mariner3nvd3redhatcve3veracode3debiancve2hackerone2alpinelinux4cve3cvelist3