VDB
DEBIAN-CVE-2016-8625
DEBIAN-CVE-2016-8625
PUBLISHED
CVSS 7.5 HIGH
curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
Risk Scores
CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | curl | 0, 0, 0 |
| Debian:13 | curl | 0, 0, 0 |
| Debian:12 | curl | 0, 0, 0 |
| Debian:11 | curl | 0, 0, 0 |
Timeline
- Aug 1, 2018 CVE Published
- Apr 28, 2026 CVE Updated