Not rated
CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient…
Description
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| https://github.com/curl/curl | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- hackerone.com hackerone.com
- curl.se curl.se
- FEDORA-2020-ceaf490686 lists.fedoraproject.org
- [debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update lists.debian.org
- FEDORA-2020-7ab62c73bc lists.fedoraproject.org
- GLSA-202012-14 security.gentoo.org
- DSA-4881 www.debian.org
- 20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina seclists.org
- 20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 seclists.org
- 20210427 APPLE-SA-2021-04-26-4 Security Update 2021-003 Mojave seclists.org
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- cert-portal.siemens.com cert-portal.siemens.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified