Home

CVE-2020-8231

Description

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.222

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-8231 are fixed in Curl For Windows 7.72.0Windows
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.68.0-1ubuntu2.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.68.0-1ubuntu2.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.47.0-1ubuntu2.16_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.47.0-1ubuntu2.16_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.58.0-2ubuntu3.10_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) curl_7.58.0-2ubuntu3.10_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) libcurl3_7.47.0-1ubuntu2.16_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) libcurl3_7.47.0-1ubuntu2.16_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) libcurl4_7.68.0-1ubuntu2.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4466-1) libcurl4_7.68.0-1ubuntu2.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.68.0-1ubuntu2.4_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.68.0-1ubuntu2.4_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.68.0-1ubuntu4.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.68.0-1ubuntu4.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.47.0-1ubuntu2.18_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.47.0-1ubuntu2.18_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.58.0-2ubuntu3.12_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) curl_7.58.0-2ubuntu3.12_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3_7.47.0-1ubuntu2.18_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3_7.47.0-1ubuntu2.18_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.68.0-1ubuntu2.4_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.68.0-1ubuntu2.4_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.68.0-1ubuntu4.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.68.0-1ubuntu4.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.58.0-2ubuntu3.12_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl4_7.58.0-2ubuntu3.12_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.68.0-1ubuntu2.4_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.68.0-1ubuntu2.4_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.68.0-1ubuntu4.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.68.0-1ubuntu4.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.47.0-1ubuntu2.18_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.47.0-1ubuntu2.18_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.58.0-2ubuntu3.12_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-nss_7.58.0-2ubuntu3.12_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.68.0-1ubuntu2.4_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.68.0-1ubuntu2.4_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.68.0-1ubuntu4.2_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.68.0-1ubuntu4.2_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.47.0-1ubuntu2.18_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.47.0-1ubuntu2.18_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.58.0-2ubuntu3.12_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-4665-1) libcurl3-gnutls_7.58.0-2ubuntu3.12_amd64.debLinux
curl security update(DSA-4881-1) curl_7.64.0-4+deb10u2_i386.debLinux
curl security update(DSA-4881-1) curl_7.64.0-4+deb10u2_amd64.debLinux
(RHSA-2021:1610) curl security and bug fix update curl-7.61.1-18.el8.x86_64.rpmLinux
(RHSA-2021:1610) curl security and bug fix update curl-debugsource-7.61.1-18.el8.i686.rpmLinux
(RHSA-2021:1610) curl security and bug fix update curl-debugsource-7.61.1-18.el8.x86_64.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-7.61.1-18.el8.i686.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-7.61.1-18.el8.x86_64.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-devel-7.61.1-18.el8.i686.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-devel-7.61.1-18.el8.x86_64.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-minimal-7.61.1-18.el8.i686.rpmLinux
(RHSA-2021:1610) curl security and bug fix update libcurl-minimal-7.61.1-18.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234