Lucene search
Veracode Vulnerability DatabaseVERACODE:26465HistoryAug 20, 2020 - 4:14 a.m.
Insecure Connection Processing
2020-08-2004:14:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
0.003 Low
EPSS
Percentile
66.4%
libcurl.so does not securely handle connections. An application that performs multiple requests with the multi API and sets the CURLOPT_CONNECT_ONLY option when using the setup connect-only transfer, could potentially use the wrong connection and and utilize another connection that was created.
References
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
curl.haxx.se/docs/CVE-2020-8231.html
hackerone.com/reports/948876
lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
security.gentoo.org/glsa/202012-14
www.debian.org/security/2021/dsa-4881
www.oracle.com/security-alerts/cpuapr2022.html
Related
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : curl vulnerability (USN-4466-1)
2020-08-20 00:00:00
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2020:2445-1)
2020-09-04 00:00:00
Puppet Enterprise < 2018.1.17 / 2019.x < 2019.8.3 Curl Vulnerability
2023-11-01 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: curl-7.69.1-5.fc32
2020-08-21 01:11:30
[SECURITY] Fedora 31 Update: curl-7.66.0-3.fc31
2020-09-03 16:27:08
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:2445-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4466-2)
2022-08-26 00:00:00
Fedora: Security Advisory for curl (FEDORA-2020-da832cb434)
2020-08-25 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2020-8231)
2022-04-21 20:41:52
Security Bulletin: Watson Machine Learning Community Edition docker containers have been updated to fix a security issue in libcurl
2021-02-04 23:53:58
Security Bulletin: Vulnerability in Curl affects PowerSC (CVE-2020-8231)
2021-02-01 20:57:29
osv
osv
CVE-2020-8231
2020-12-14 20:15:13
curl - security update
2020-09-26 00:00:00
Moderate: curl security and bug fix update
2021-05-18 05:39:00
suse
suse
Security update for curl (moderate)
2020-09-05 00:00:00
Security update for curl (moderate)
2020-09-21 00:00:00
Security update for curl (moderate)
2020-09-07 00:00:00
ubuntucve
ubuntucve
CVE-2020-8231
2020-08-19 00:00:00
slackware
slackware
[slackware-security] curl
2020-08-19 18:21:41
hackerone
hackerone
curl: Connect-only connections can use the wrong connection
2020-07-31 20:57:36
photon
photon
cve
cve
CVE-2020-8231
2020-12-14 20:15:13
redhatcve
redhatcve
CVE-2020-8231
2020-08-19 11:12:11
freebsd
freebsd
curl -- expired pointer dereference vulnerability
2020-08-19 00:00:00
alpinelinux
alpinelinux
CVE-2020-8231
2020-12-14 20:15:13
cbl_mariner
cbl_mariner
CVE-2020-8231 affecting package curl 7.68.0-5
2021-01-11 21:49:35
ubuntu
ubuntu
curl vulnerability
2020-08-19 00:00:00
curl vulnerability
2020-08-20 00:00:00
curl vulnerabilities
2020-12-09 00:00:00
cloudfoundry
cloudfoundry
USN-4466-1: curl vulnerability | Cloud Foundry
2020-09-24 00:00:00
USN-4665-1: curl vulnerabilities | Cloud Foundry
2021-01-12 00:00:00
nvd
nvd
CVE-2020-8231
2020-12-14 20:15:13
cvelist
cvelist
CVE-2020-8231
2020-12-14 19:39:19
prion
prion
Code injection
2020-12-14 20:15:00
debian
debian
[SECURITY] [DLA 2382-1] curl security update
2020-09-26 15:33:03
[SECURITY] [DSA 4881-1] curl security update
2021-03-31 09:30:31
amazon
amazon
Low: curl
2020-11-14 01:22:00
Medium: curl
2021-08-04 20:32:00
debiancve
debiancve
CVE-2020-8231
2020-12-14 20:15:13
oraclelinux
oraclelinux
curl security and bug fix update
2021-05-25 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2020-12-31 17:32:44
rocky
rocky
curl security and bug fix update
2021-05-18 05:39:00
almalinux
almalinux
Moderate: curl security and bug fix update
2021-05-18 05:39:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-12-23 00:00:00
redhat
redhat
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00