CVE-2016-8625 PUBLISHED

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

EPSS 1.53% · 81.2th percentile

Risk Scores

EPSS Score
1.53%
81.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTScurl0, 7.32.0-1ubuntu1, 7.33.0-1ubuntu1
Ubuntu:Pro:16.04:LTScurl0, 7.43.0-1ubuntu2, 7.45.0-1ubuntu1

Timeline

References

Open in Interactive Console →