← Back

CVE-2020-8285

nvd nist
Published: Dec 14, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

Affected (48)

Products: Haxx: Libcurl · Debian: Debian Linux · Fedoraproject: Fedora · +6 more
Show all products
Haxx: Libcurl · Debian: Debian Linux · Fedoraproject: Fedora · Netapp: Clustered Data Ontap, Hci Management Node, Solidfire, Hci Bootstrap Os, Hci Storage Node Firmware · Apple: Mac Os X, Macos · Oracle: Communications Billing And Revenue Management, Communications Cloud Native Core Policy, Essbase, Peoplesoft Enterprise Peopletools · Fujitsu: M10 1 Firmware, M10 4 Firmware, M10 4s Firmware, M12 1 Firmware, M12 2 Firmware, M12 2s Firmware · Siemens: Sinec Infrastructure Network Services · Splunk: Universal Forwarder
Haxx
1 product
Libcurl
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Netapp
5 products
Clustered Data Ontap
Hci Management Node
Solidfire
Hci Bootstrap Os
Hci Storage Node Firmware
Apple
2 products
Mac Os X
Macos
Oracle
4 products
Communications Billing And Revenue Management
Communications Cloud Native Core Policy
Essbase
Peoplesoft Enterprise Peopletools
Fujitsu
6 products
M10 1 Firmware
M10 4 Firmware
M10 4s Firmware
M12 1 Firmware
M12 2 Firmware
M12 2s Firmware
Siemens
1 product
Sinec Infrastructure Network Services
Splunk
1 product
Universal Forwarder
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libcurl
From 7.21.0 to 7.74.0
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 9.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 32
Fedora
Version 33
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Clustered Data Ontap
All versions
Hci Management Node
All versions
Solidfire
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hci Bootstrap Os
All versions
Running on/withPlatform Versions
Netapp
Hci Compute Node
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hci Storage Node Firmware
All versions
Running on/withPlatform Versions
Netapp
Hci Storage Node
All versions
Configuration G
18 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Mac Os X
Before 10.14.6
Mac Os X
From 10.15 to 10.15.7
Mac Os X
Version 10.14.6
Mac Os X
Version 10.14.6 security_update_2019-001
Mac Os X
Version 10.14.6 security_update_2019-002
Mac Os X
Version 10.14.6 security_update_2020-001
Mac Os X
Version 10.14.6 security_update_2020-002
Mac Os X
Version 10.14.6 security_update_2020-003
Mac Os X
Version 10.14.6 security_update_2020-004
Mac Os X
Version 10.14.6 security_update_2020-005
Mac Os X
Version 10.14.6 security_update_2020-006
Mac Os X
Version 10.14.6 security_update_2020-007
Mac Os X
Version 10.14.6 security_update_2021-001
Mac Os X
Version 10.15.7
Mac Os X
Version 10.15.7 security_update_2020-001
Mac Os X
Version 10.15.7 security_update_2021-001
Mac Os X
Version 10.15.7 supplemental_update
Macos
From 11.0 to 11.3
Configuration H
4 vulnerable
Vulnerable SoftwareAffected Versions
Communications Billing And Revenue Management
Version 12.0.0.3.0
Communications Cloud Native Core Policy
Version 1.14.0
Essbase
Version 21.2
Peoplesoft Enterprise Peopletools
Version 8.58
Configuration I
1 vulnerable
Vulnerable SoftwareAffected Versions
M10 1 Firmware
Before xcp2410
Configuration J
1 vulnerable
Vulnerable SoftwareAffected Versions
M10 4 Firmware
Before xcp2410
Configuration K
1 vulnerable
Vulnerable SoftwareAffected Versions
M10 4s Firmware
Before xcp2410
Configuration L
1 vulnerable
Vulnerable SoftwareAffected Versions
M12 1 Firmware
Before xcp2410
Configuration M
1 vulnerable
Vulnerable SoftwareAffected Versions
M12 2 Firmware
Before xcp2410
Configuration N
1 vulnerable
Vulnerable SoftwareAffected Versions
M12 2s Firmware
Before xcp2410
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M10 1 Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M10 1
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M10 4 Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M10 4
All versions
Configuration Q
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M10 4s Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M10 4s
All versions
Configuration R
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M12 1 Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M12 1
All versions
Configuration S
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M12 2 Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M12 2
All versions
Configuration T
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
M12 2s Firmware
Before xcp3110
Running on/withPlatform Versions
Fujitsu
M12 2s
All versions
Configuration U
1 vulnerable
Vulnerable SoftwareAffected Versions
Sinec Infrastructure Network Services
Before 1.0.1.1
Configuration V
3 vulnerable
Vulnerable SoftwareAffected Versions
Splunk
Universal Forwarder
From 8.2.0 to 8.2.12
Universal Forwarder
From 9.0.0 to 9.0.6
Universal Forwarder
Version 9.1.0

Related CWEs

CWE-674
Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (40)

Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
Vendor Advisory
Source: support@hackerone.com
ExploitThird Party Advisory
Source: support@hackerone.com
Permissions Required
Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
Mailing ListThird Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
Third Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: support@hackerone.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.