CVE-2016-8625
- State
- Published
- Severity
- 5.3 Medium
- Published
- Aug 1, 2018
- Updated
- Aug 6, 2024
- Reserved
- Oct 12, 2016
Description
curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
curlThe Curl Project |
|
References
- 94107vdb-entry
- https://curl.haxx.se/CVE-2016-8625.patch
- RHSA-2018:3558vendor-advisory
- https://www.tenable.com/security/tns-2016-21
- https://curl.haxx.se/docs/adv_20161102K.html
- 1037192vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8625
- RHSA-2018:2486vendor-advisory
- GLSA-201701-47vendor-advisory
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8mailing-list
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.