ALPINE-CVE-2016-8625 PUBLISHED CVSS 7.5 HIGH

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Alpine:v3.8curl0, 7.50.3-r1, 7.50.3-r0
Alpine:v3.14curl0, 7.50.3-r0, 7.50.2-r0
Alpine:v3.12curl7.28.0-r0, 0, 7.19.2-r1
Alpine:v3.9curl7.50.3-r1, 0, 7.19.2-r0
Alpine:v3.17curl7.19.2-r0, 7.50.3-r1, 7.50.3-r0
Alpine:v3.7curl7.33.0-r1, 0, 7.19.2-r1
Alpine:v3.13curl7.19.2-r0, 0, 7.50.3-r1
Alpine:v3.16curl7.50.3-r1, 7.50.3-r0, 7.50.2-r0
Alpine:v3.5curl7.46.0-r1, 7.50.3-r0, 7.50.2-r0
Alpine:v3.19curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.18curl0, 7.50.3-r1, 7.50.3-r0
Alpine:v3.6curl0, 7.50.3-r1, 7.50.3-r0
Alpine:v3.21curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.22curl7.45.0-r1, 0, 7.19.2-r1
Alpine:v3.10curl7.50.3-r1, 7.19.2-r0, 7.19.2-r1
Alpine:v3.15curl7.50.3-r1, 0, 7.19.2-r0
Alpine:v3.4curl7.19.2-r1, 7.50.3-r0, 7.50.2-r0
Alpine:v3.20curl7.35.0-r0, 7.36.0-r0, 7.37.0-r0
Alpine:v3.11curl7.27.0-r1, 7.50.3-r1, 7.50.3-r0
Alpine:v3.23curl7.34.0-r1, 7.34.0-r0, 7.33.0-r1

Timeline

References

Open in Interactive Console →