curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Aug 22, 2024 | Aug 1, 2018 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Dec 16, 2016 | Dec 16, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 1, 2018 |
| Debian | — | Upgrade curl | Jul 30, 2024 | Aug 1, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 14, 2017 |
| Freebsd | — | Upgrade curl | Nov 14, 2016 | Nov 2, 2016 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Oct 30, 2017 | Jan 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Dec 4, 2019 | Aug 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade libcurl-develUpgrade curl | Apr 16, 2020 | Aug 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Nov 19, 2019 | Aug 1, 2018 |
| Oracle Solaris | — | Upgrade web/curl to version 7.59.0-0.175.3.33.0.3.0 on Solaris 11.3 | Jun 18, 2018 | Jun 18, 2018 |
| Oracle_linux | — | Upgrade libcurlUpgrade libcurl-develUpgrade curl | May 22, 2019 | Nov 2, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 1, 2018 |
| Suse | — | Upgrade libcurl4Upgrade curlUpgrade libcurl-develUpgrade libcurl4-32bit | May 19, 2018 | Nov 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub