CVE-2020-8286
14.12.2020, 20:15
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| haxx | libcurl | 7.41.0 ≤ 𝑥 < 7.74.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| netapp | clustered_data_ontap | - |
| netapp | hci_management_node | - |
| netapp | solidfire | - |
| netapp | hci_bootstrap_os | - |
| netapp | hci_storage_node_firmware | - |
| apple | mac_os_x | 𝑥 < 10.14.6 |
| apple | mac_os_x | 10.15 ≤ 𝑥 < 10.15.7 |
| apple | mac_os_x | 10.14.6 |
| apple | mac_os_x | 10.14.6:security_update_2019-001 |
| apple | mac_os_x | 10.14.6:security_update_2019-002 |
| apple | mac_os_x | 10.14.6:security_update_2020-001 |
| apple | mac_os_x | 10.14.6:security_update_2020-002 |
| apple | mac_os_x | 10.14.6:security_update_2020-003 |
| apple | mac_os_x | 10.14.6:security_update_2020-004 |
| apple | mac_os_x | 10.14.6:security_update_2020-005 |
| apple | mac_os_x | 10.14.6:security_update_2020-006 |
| apple | mac_os_x | 10.14.6:security_update_2020-007 |
| apple | mac_os_x | 10.14.6:security_update_2021-001 |
| apple | mac_os_x | 10.15.7 |
| apple | mac_os_x | 10.15.7:security_update_2020-001 |
| apple | mac_os_x | 10.15.7:security_update_2021-001 |
| apple | mac_os_x | 10.15.7:supplemental_update |
| apple | macos | 11.0 ≤ 𝑥 < 11.3 |
| siemens | simatic_tim_1531_irc_firmware | 𝑥 ≤ 2.2 |
| siemens | sinec_infrastructure_network_services | 𝑥 < 1.0.1.1 |
| oracle | communications_billing_and_revenue_management | 12.0.0.3.0 |
| oracle | communications_cloud_native_core_policy | 1.14.0 |
| oracle | essbase | 21.2 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| splunk | universal_forwarder | 8.2.0 ≤ 𝑥 < 8.2.12 |
| splunk | universal_forwarder | 9.0.0 ≤ 𝑥 < 9.0.6 |
| splunk | universal_forwarder | 9.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| curl |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl4 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libcurl4-32bit |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References