NetSight
IP …
high7.5

CVE-2020-8286

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

Impact

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

Affected products

VendorProductAffected versions
HaxxLibcurl
from 7.41.0 before 7.74.0
FedoraprojectFedora
Versions 32, 33
DebianDebian Linux
Versions 9.0, 10.0
NetappClustered Data Ontap
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappHci Bootstrap Os
All versions
NetappHci Storage Node Firmware
All versions
AppleMac Os X
before 10.14.6
from 10.15 before 10.15.7
Versions 10.14.6, 10.15.7
AppleMacos
from 11.0 before 11.3
SiemensSimatic Tim 1531 Irc Firmware
through 2.2
SiemensSinec Infrastructure Network Services
before 1.0.1.1

Weakness classification

CWE-295

References