CVE-2020-8284Low· 3.7▾ TwilightPoC availableA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and n…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 20.4 · likelihood 0.8 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.9%
Exploit / PoC code exists
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
curl <= 7.73.0fedora = 32fedora = 33debian_linux = 9.0debian_linux = 10.0clustered_data_ontaphci_management_nodesolidfirehci_storage_nodehci_bootstrap_osmac_os_x >= 10.14.0, < 10.14.6mac_os_x >= 10.15, < 10.15.7mac_os_x = 10.14.6mac_os_x = 10.15.7macos = 11.0.1macos = 11.1macos = 11.2communications_billing_and_revenue_management = 12.0.0.3.0communications_cloud_native_core_policy = 1.14.0essbase = 21.2peoplesoft_enterprise_peopletools = 8.58m10-1_firmware < xcp2410m10-4_firmware < xcp2410m10-4s_firmware < xcp2410m12-1_firmware < xcp2410m12-2_firmware < xcp2410m12-2s_firmware < xcp2410m10-1_firmware < xcp3110m10-4_firmware < xcp3110m10-4s_firmware < xcp3110m12-1_firmware < xcp3110m12-2_firmware < xcp3110m12-2s_firmware < xcp3110sinec_infrastructure_network_services < 1.0.1.1universal_forwarder >= 8.2.0, < 8.2.12universal_forwarder >= 9.0.0, < 9.0.6universal_forwarder = 9.1.0Upgrade past the affected range:
mac_os_x 10.15.7m10-1_firmware xcp3110m10-4_firmware xcp3110m10-4s_firmware xcp3110m12-1_firmware xcp3110m12-2_firmware xcp3110m12-2s_firmware xcp3110sinec_infrastructure_network_services 1.0.1.1universal_forwarder 9.0.6Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-22925Medium· 5.3curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl
CVE-2021-22898Low· 3.1curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers
CVE-2020-8169High· 7.5curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
CVE-2021-22947Medium· 5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches
CVE-2021-22946High· 7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withli…
CVE-2021-22926High· 7.5libcurl-using applications can ask for a specific client certificate to be used in a transfer