7.5
CVE-2020-8285
- EPSS 9.92%
- Veröffentlicht 14.12.2020 20:15:13
- Zuletzt bearbeitet 16.04.2026 15:16:43
- Quelle support@hackerone.com
- CVE-Watchlists
- Unerledigt
Logincurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Fedoraproject ≫ Fedora Version32
Fedoraproject ≫ Fedora Version33
Netapp ≫ Clustered Data Ontap Version-
Netapp ≫ Hci Management Node Version-
Netapp ≫ Hci Bootstrap Os Version-
Netapp ≫ Hci Storage Node Firmware Version-
Oracle ≫ Communications Billing And Revenue Management Version12.0.0.3.0
Oracle ≫ Communications Cloud Native Core Policy Version1.14.0
Oracle ≫ Peoplesoft Enterprise Peopletools Version8.58
Fujitsu ≫ M10-1 Firmware Version < xcp2410
Fujitsu ≫ M10-4 Firmware Version < xcp2410
Fujitsu ≫ M10-4s Firmware Version < xcp2410
Fujitsu ≫ M12-1 Firmware Version < xcp2410
Fujitsu ≫ M12-2 Firmware Version < xcp2410
Fujitsu ≫ M12-2s Firmware Version < xcp2410
Fujitsu ≫ M10-1 Firmware Version < xcp3110
Fujitsu ≫ M10-4 Firmware Version < xcp3110
Fujitsu ≫ M10-4s Firmware Version < xcp3110
Fujitsu ≫ M12-1 Firmware Version < xcp3110
Fujitsu ≫ M12-2 Firmware Version < xcp3110
Fujitsu ≫ M12-2s Firmware Version < xcp3110
Siemens ≫ Sinec Infrastructure Network Services Version < 1.0.1.1
Splunk ≫ Universal Forwarder Version >= 8.2.0 < 8.2.12
Splunk ≫ Universal Forwarder Version >= 9.0.0 < 9.0.6
Splunk ≫ Universal Forwarder Version9.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.92% | 0.95 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-674 Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
http://seclists.org/fulldisclosure/2021/Apr/51
https://support.apple.com/kb/HT212326
https://support.apple.com/kb/HT212327
https://support.apple.com/kb/HT212325
https://www.debian.org/security/2021/dsa-4881
https://security.gentoo.org/glsa/202012-14
https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
https://security.netapp.com/advisory/ntap-20210122-0007/
https://curl.se/docs/CVE-2020-8285.html
https://github.com/curl/curl/issues/6255
https://hackerone.com/reports/1045844