curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-curl | Dec 14, 2020 | Dec 14, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-curlamazon-linux-ami-2-upgrade-curl-debuginfoamazon-linux-ami-2-upgrade-libcurlamazon-linux-ami-2-upgrade-libcurl-devel | Jul 21, 2020 | Jul 21, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-curl | Jul 30, 2020 | Jun 24, 2020 |
| Centos_linux | — | centos-upgrade-curlcentos-upgrade-curl-debuginfocentos-upgrade-curl-debugsourcecentos-upgrade-curl-minimal-debuginfocentos-upgrade-libcurlcentos-upgrade-libcurl-debuginfocentos-upgrade-libcurl-develcentos-upgrade-libcurl-minimalcentos-upgrade-libcurl-minimal-debuginfo | Nov 5, 2020 | Nov 3, 2020 |
| Debian | debian-upgrade-curl | Jul 30, 2020 | Jul 30, 2020 | |
| Freebsd | freebsd-upgrade-package-curl | Jun 25, 2020 | Jun 24, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-curl | Jul 28, 2020 | Jul 26, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-curlhuawei-euleros-2_0_sp2-upgrade-libcurlhuawei-euleros-2_0_sp2-upgrade-libcurl-devel | Nov 3, 2020 | Jul 30, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-curlhuawei-euleros-2_0_sp3-upgrade-libcurlhuawei-euleros-2_0_sp3-upgrade-libcurl-devel | Sep 28, 2020 | Jul 30, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-curlhuawei-euleros-2_0_sp5-upgrade-libcurlhuawei-euleros-2_0_sp5-upgrade-libcurl-devel | Sep 3, 2020 | Jul 30, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-curlhuawei-euleros-2_0_sp8-upgrade-libcurlhuawei-euleros-2_0_sp8-upgrade-libcurl-devel | Jul 31, 2020 | Jul 30, 2020 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-curl-7-71-0-11-4-27-0-1-82-0 | Jan 19, 2021 | Dec 14, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-curloracle-linux-upgrade-libcurloracle-linux-upgrade-libcurl-develoracle-linux-upgrade-libcurl-minimal | Nov 12, 2020 | Jun 24, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Dec 14, 2020 | |
| Redhat_linux | redhat-upgrade-curlredhat-upgrade-curl-debuginforedhat-upgrade-curl-debugsourceredhat-upgrade-curl-minimal-debuginforedhat-upgrade-libcurlredhat-upgrade-libcurl-debuginforedhat-upgrade-libcurl-develredhat-upgrade-libcurl-minimalredhat-upgrade-libcurl-minimal-debuginfo | Nov 5, 2020 | Nov 3, 2020 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Dec 14, 2020 | |
| Suse | — | suse-upgrade-curlsuse-upgrade-curl-minisuse-upgrade-curl-openssl1suse-upgrade-libcurl-develsuse-upgrade-libcurl-devel-32bitsuse-upgrade-libcurl-mini-develsuse-upgrade-libcurl4suse-upgrade-libcurl4-32bitsuse-upgrade-libcurl4-minisuse-upgrade-libcurl4-openssl1suse-upgrade-libcurl4-openssl1-32bitsuse-upgrade-libcurl4-openssl1-x86 | Jun 25, 2020 | Jun 24, 2020 |
| Ubuntu | ubuntu-pro-upgrade-curlubuntu-pro-upgrade-libcurl3ubuntu-pro-upgrade-libcurl3-gnutlsubuntu-pro-upgrade-libcurl3-nssubuntu-upgrade-curlubuntu-upgrade-libcurl3ubuntu-upgrade-libcurl3-gnutlsubuntu-upgrade-libcurl3-nssubuntu-upgrade-libcurl4 | Jun 25, 2020 | Jun 24, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub