Required CVE Record Information
Description
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
References 19 Total
- https://hackerone.com/reports/1048457
- https://curl.se/docs/CVE-2020-8286.html
- lists.fedoraproject.org: FEDORA-2020-ceaf490686 vendor-advisory
- lists.debian.org: [debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update mailing-list
- lists.fedoraproject.org: FEDORA-2020-7ab62c73bc vendor-advisory
- security.gentoo.org: GLSA-202012-14 vendor-advisory
- debian.org: DSA-4881 vendor-advisory
- seclists.org: 20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina mailing-list
- seclists.org: 20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 mailing-list
- seclists.org: 20210427 APPLE-SA-2021-04-26-4 Security Update 2021-003 Mojave mailing-list
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://security.netapp.com/advisory/ntap-20210122-0007/
- https://support.apple.com/kb/HT212325
- https://support.apple.com/kb/HT212326
- https://support.apple.com/kb/HT212327
- https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 19 Total
- https://hackerone.com/reports/1048457 x_transferred
- https://curl.se/docs/CVE-2020-8286.html x_transferred
- lists.fedoraproject.org: FEDORA-2020-ceaf490686 vendor-advisoryx_transferred
- lists.debian.org: [debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update mailing-listx_transferred
- lists.fedoraproject.org: FEDORA-2020-7ab62c73bc vendor-advisoryx_transferred
- security.gentoo.org: GLSA-202012-14 vendor-advisoryx_transferred
- debian.org: DSA-4881 vendor-advisoryx_transferred
- seclists.org: 20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina mailing-listx_transferred
- seclists.org: 20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 mailing-listx_transferred
- seclists.org: 20210427 APPLE-SA-2021-04-26-4 Security Update 2021-003 Mojave mailing-listx_transferred
- https://www.oracle.com/security-alerts/cpuApr2021.html x_transferred
- https://security.netapp.com/advisory/ntap-20210122-0007/ x_transferred
- https://support.apple.com/kb/HT212325 x_transferred
- https://support.apple.com/kb/HT212326 x_transferred
- https://support.apple.com/kb/HT212327 x_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf x_transferred
- https://www.oracle.com//security-alerts/cpujul2021.html x_transferred
- https://www.oracle.com/security-alerts/cpuapr2022.html x_transferred
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf x_transferred