CVE-2020-8285High· 7.5▾ Twilightcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
9.8%
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
libcurl >= 7.21.0, < 7.74.0debian_linux = 9.0debian_linux = 10.0fedora = 32fedora = 33clustered_data_ontaphci_management_nodesolidfirehci_bootstrap_oshci_storage_node_firmwaremac_os_x < 10.14.6mac_os_x >= 10.15, < 10.15.7mac_os_x = 10.14.6mac_os_x = 10.15.7macos >= 11.0, < 11.3communications_billing_and_revenue_management = 12.0.0.3.0communications_cloud_native_core_policy = 1.14.0essbase = 21.2peoplesoft_enterprise_peopletools = 8.58m10-1_firmware < xcp2410m10-4_firmware < xcp2410m10-4s_firmware < xcp2410m12-1_firmware < xcp2410m12-2_firmware < xcp2410m12-2s_firmware < xcp2410m10-1_firmware < xcp3110m10-4_firmware < xcp3110m10-4s_firmware < xcp3110m12-1_firmware < xcp3110m12-2_firmware < xcp3110m12-2s_firmware < xcp3110sinec_infrastructure_network_services < 1.0.1.1universal_forwarder >= 8.2.0, < 8.2.12universal_forwarder >= 9.0.0, < 9.0.6universal_forwarder = 9.1.0Upgrade past the affected range:
libcurl 7.74.0mac_os_x 10.15.7macos 11.3m10-1_firmware xcp3110m10-4_firmware xcp3110m10-4s_firmware xcp3110m12-1_firmware xcp3110m12-2_firmware xcp3110m12-2s_firmware xcp3110sinec_infrastructure_network_services 1.0.1.1universal_forwarder 9.0.6Connected by shared product, vendor, weakness, or advisory.
CVE-2020-8286High· 7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVE-2020-8231High· 7.5Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
CVE-2020-28196High· 7.5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
CVE-2021-45105Medium· 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
CVE-2020-8284Low· 3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and n…
CVE-2020-8177High· 7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.