Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/curl@7.26.0-1%2Bwheezy13
Typedeb
Namespacedebian
Namecurl
Version7.26.0-1+wheezy13
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.88.1-10+deb12u7
Latest_non_vulnerable_version8.18.0-2
Affected_by_vulnerabilities
0
url VCID-1a1k-d4ez-ybdu
vulnerability_id VCID-1a1k-d4ez-ybdu
summary When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-35252.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52551
published_at 2026-06-04T12:55:00Z
1
value 0.00289
scoring_system epss
scoring_elements 0.52611
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-35252
2
reference_url https://curl.se/docs/CVE-2022-35252.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-35252.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35252
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1613943
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://hackerone.com/reports/1613943
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
reference_id 1018831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018831
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/21
reference_id 21
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url http://seclists.org/fulldisclosure/2023/Jan/21
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
reference_id 2120718
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120718
10
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.gentoo.org/glsa/202212-01
11
reference_url https://support.apple.com/kb/HT213603
reference_id HT213603
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213603
12
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://support.apple.com/kb/HT213604
13
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
14
reference_url https://security.netapp.com/advisory/ntap-20220930-0005/
reference_id ntap-20220930-0005
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:42Z/
url https://security.netapp.com/advisory/ntap-20220930-0005/
15
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
16
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
17
reference_url https://access.redhat.com/errata/RHSA-2023:2478
reference_id RHSA-2023:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2478
18
reference_url https://access.redhat.com/errata/RHSA-2023:2963
reference_id RHSA-2023:2963
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2963
19
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
20
reference_url https://usn.ubuntu.com/5587-1/
reference_id USN-5587-1
reference_type
scores
url https://usn.ubuntu.com/5587-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-35252
risk_score 1.4
exploitability 0.5
weighted_severity 2.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1a1k-d4ez-ybdu
1
url VCID-1b5g-9trz-7ufb
vulnerability_id VCID-1b5g-9trz-7ufb
summary curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9586.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
reference_id
reference_type
scores
0
value 0.01009
scoring_system epss
scoring_elements 0.7743
published_at 2026-06-04T12:55:00Z
1
value 0.01009
scoring_system epss
scoring_elements 0.77458
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-9586
2
reference_url https://curl.se/docs/CVE-2016-9586.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-9586.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.2
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:N/I:N/A:P
1
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1037515
reference_id 1037515
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securitytracker.com/id/1037515
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406712
reference_id 1406712
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406712
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
reference_id 848958
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848958
8
reference_url http://www.securityfocus.com/bid/95019
reference_id 95019
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url http://www.securityfocus.com/bid/95019
9
reference_url https://curl.haxx.se/docs/adv_20161221A.html
reference_id adv_20161221A.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://curl.haxx.se/docs/adv_20161221A.html
10
reference_url https://security.archlinux.org/ASA-201612-22
reference_id ASA-201612-22
reference_type
scores
url https://security.archlinux.org/ASA-201612-22
11
reference_url https://security.archlinux.org/ASA-201701-10
reference_id ASA-201701-10
reference_type
scores
url https://security.archlinux.org/ASA-201701-10
12
reference_url https://security.archlinux.org/ASA-201701-11
reference_id ASA-201701-11
reference_type
scores
url https://security.archlinux.org/ASA-201701-11
13
reference_url https://security.archlinux.org/ASA-201701-7
reference_id ASA-201701-7
reference_type
scores
url https://security.archlinux.org/ASA-201701-7
14
reference_url https://security.archlinux.org/ASA-201701-8
reference_id ASA-201701-8
reference_type
scores
url https://security.archlinux.org/ASA-201701-8
15
reference_url https://security.archlinux.org/ASA-201701-9
reference_id ASA-201701-9
reference_type
scores
url https://security.archlinux.org/ASA-201701-9
16
reference_url https://security.archlinux.org/AVG-112
reference_id AVG-112
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-112
17
reference_url https://security.archlinux.org/AVG-113
reference_id AVG-113
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-113
18
reference_url https://security.archlinux.org/AVG-114
reference_id AVG-114
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-114
19
reference_url https://security.archlinux.org/AVG-115
reference_id AVG-115
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-115
20
reference_url https://security.archlinux.org/AVG-116
reference_id AVG-116
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-116
21
reference_url https://security.archlinux.org/AVG-117
reference_id AVG-117
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-117
22
reference_url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
reference_id curl-7_51_0-162-g3ab3c16
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16
23
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://security.gentoo.org/glsa/201701-47
24
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
25
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
26
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
reference_id show_bug.cgi?id=CVE-2016-9586
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:03:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586
28
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
29
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-9586
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1b5g-9trz-7ufb
2
url VCID-1kpz-55f1-f7dj
vulnerability_id VCID-1kpz-55f1-f7dj
summary curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14618.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14618
reference_id
reference_type
scores
0
value 0.00493
scoring_system epss
scoring_elements 0.661
published_at 2026-06-05T12:55:00Z
1
value 0.00493
scoring_system epss
scoring_elements 0.66048
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14618
2
reference_url https://curl.se/docs/CVE-2018-14618.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-14618.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1041605
reference_id 1041605
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url http://www.securitytracker.com/id/1041605
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1622707
reference_id 1622707
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1622707
7
reference_url https://usn.ubuntu.com/3765-1/
reference_id 3765-1
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://usn.ubuntu.com/3765-1/
8
reference_url https://usn.ubuntu.com/3765-2/
reference_id 3765-2
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://usn.ubuntu.com/3765-2/
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908327
reference_id 908327
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908327
10
reference_url https://curl.haxx.se/docs/CVE-2018-14618.html
reference_id CVE-2018-14618.html
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://curl.haxx.se/docs/CVE-2018-14618.html
11
reference_url https://www.debian.org/security/2018/dsa-4286
reference_id dsa-4286
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://www.debian.org/security/2018/dsa-4286
12
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://security.gentoo.org/glsa/201903-03
13
reference_url https://access.redhat.com/errata/RHSA-2019:1880
reference_id RHSA-2019:1880
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://access.redhat.com/errata/RHSA-2019:1880
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618
reference_id show_bug.cgi?id=CVE-2018-14618
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618
15
reference_url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014
reference_id SNWLID-2018-0014
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014
16
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:54:10Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-14618
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1kpz-55f1-f7dj
3
url VCID-1y6d-7vfu-ybb3
vulnerability_id VCID-1y6d-7vfu-ybb3
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8620.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8620
reference_id
reference_type
scores
0
value 0.00881
scoring_system epss
scoring_elements 0.75749
published_at 2026-06-05T12:55:00Z
1
value 0.00881
scoring_system epss
scoring_elements 0.75721
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8620
2
reference_url https://curl.se/docs/CVE-2016-8620.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8620.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388382
reference_id 1388382
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388382
16
reference_url http://www.securityfocus.com/bid/94102
reference_id 94102
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url http://www.securityfocus.com/bid/94102
17
reference_url https://curl.haxx.se/docs/adv_20161102F.html
reference_id adv_20161102F.html
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url https://curl.haxx.se/docs/adv_20161102F.html
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
20
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url https://security.gentoo.org/glsa/201701-47
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8620
reference_id show_bug.cgi?id=CVE-2016-8620
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8620
22
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:04:13Z/
url https://www.tenable.com/security/tns-2016-21
23
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8620
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1y6d-7vfu-ybb3
4
url VCID-1zsv-4jdy-63en
vulnerability_id VCID-1zsv-4jdy-63en
summary 
Improper Authentication
An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27536.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27536.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27536
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01404
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27536
2
reference_url https://curl.se/docs/CVE-2023-27536.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27536.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1895135
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://hackerone.com/reports/1895135
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179092
reference_id 2179092
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179092
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27536
reference_id CVE-2023-27536
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27536
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
12
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-14T15:39:19Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
13
reference_url https://access.redhat.com/errata/RHSA-2023:4523
reference_id RHSA-2023:4523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4523
14
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
15
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
16
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
17
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-27536
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1zsv-4jdy-63en
5
url VCID-2u6v-6vm9-z3by
vulnerability_id VCID-2u6v-6vm9-z3by
summary The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3707
reference_id
reference_type
scores
0
value 0.00226
scoring_system epss
scoring_elements 0.4539
published_at 2026-06-04T12:55:00Z
1
value 0.00226
scoring_system epss
scoring_elements 0.45458
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3707
2
reference_url https://curl.se/docs/CVE-2014-3707.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3707.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3707
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3707
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1154941
reference_id 1154941
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1154941
5
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
6
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
7
reference_url https://usn.ubuntu.com/2399-1/
reference_id USN-2399-1
reference_type
scores
url https://usn.ubuntu.com/2399-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-3707
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2u6v-6vm9-z3by
6
url VCID-3s4s-6c3v-7kgn
vulnerability_id VCID-3s4s-6c3v-7kgn
summary The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3739.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3739
reference_id
reference_type
scores
0
value 0.01068
scoring_system epss
scoring_elements 0.78055
published_at 2026-06-04T12:55:00Z
1
value 0.01068
scoring_system epss
scoring_elements 0.78082
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3739
2
reference_url https://curl.se/docs/CVE-2016-3739.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-3739.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3739
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1335430
reference_id 1335430
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1335430
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-3739
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s4s-6c3v-7kgn
7
url VCID-3ws4-1sak-r3ck
vulnerability_id VCID-3ws4-1sak-r3ck
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16890
reference_id
reference_type
scores
0
value 0.01204
scoring_system epss
scoring_elements 0.79299
published_at 2026-06-05T12:55:00Z
1
value 0.01204
scoring_system epss
scoring_elements 0.79272
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16890
2
reference_url https://curl.se/docs/CVE-2018-16890.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16890.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106947
reference_id 106947
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url http://www.securityfocus.com/bid/106947
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670252
reference_id 1670252
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670252
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2018-16890.html
reference_id CVE-2018-16890.html
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://curl.haxx.se/docs/CVE-2018-16890.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://support.f5.com/csp/article/K03314397?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K03314397?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://support.f5.com/csp/article/K03314397?utm_source=f5support&amp%3Butm_medium=RSS
24
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
25
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://access.redhat.com/errata/RHSA-2019:3701
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890
reference_id show_bug.cgi?id=CVE-2018-16890
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:53:28Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-16890
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ws4-1sak-r3ck
8
url VCID-4hha-2z31-2bf8
vulnerability_id VCID-4hha-2z31-2bf8
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16839.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16839
reference_id
reference_type
scores
0
value 0.00346
scoring_system epss
scoring_elements 0.57384
published_at 2026-06-04T12:55:00Z
1
value 0.00346
scoring_system epss
scoring_elements 0.57437
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16839
2
reference_url https://curl.se/docs/CVE-2018-16839.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16839.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securitytracker.com/id/1042012
reference_id 1042012
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url http://www.securitytracker.com/id/1042012
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1642201
reference_id 1642201
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1642201
8
reference_url https://usn.ubuntu.com/3805-1/
reference_id 3805-1
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://usn.ubuntu.com/3805-1/
9
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
10
reference_url https://security.archlinux.org/ASA-201811-7
reference_id ASA-201811-7
reference_type
scores
url https://security.archlinux.org/ASA-201811-7
11
reference_url https://security.archlinux.org/ASA-201811-8
reference_id ASA-201811-8
reference_type
scores
url https://security.archlinux.org/ASA-201811-8
12
reference_url https://security.archlinux.org/ASA-201811-9
reference_id ASA-201811-9
reference_type
scores
url https://security.archlinux.org/ASA-201811-9
13
reference_url https://security.archlinux.org/AVG-796
reference_id AVG-796
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-796
14
reference_url https://security.archlinux.org/AVG-797
reference_id AVG-797
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-797
15
reference_url https://security.archlinux.org/AVG-798
reference_id AVG-798
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-798
16
reference_url https://curl.haxx.se/docs/CVE-2018-16839.html
reference_id CVE-2018-16839.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://curl.haxx.se/docs/CVE-2018-16839.html
17
reference_url https://www.debian.org/security/2018/dsa-4331
reference_id dsa-4331
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://www.debian.org/security/2018/dsa-4331
18
reference_url https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
reference_id f3a24d7916b9173c69a3e0ee790102993833d6c5
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
19
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://security.gentoo.org/glsa/201903-03
20
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839
reference_id show_bug.cgi?id=CVE-2018-16839
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:57:02Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-16839
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4hha-2z31-2bf8
9
url VCID-4zcd-rbx3-qye5
vulnerability_id VCID-4zcd-rbx3-qye5
summary Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5482.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5482
reference_id
reference_type
scores
0
value 0.09715
scoring_system epss
scoring_elements 0.93078
published_at 2026-06-04T12:55:00Z
1
value 0.09715
scoring_system epss
scoring_elements 0.93089
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5482
2
reference_url https://curl.se/docs/CVE-2019-5482.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5482.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/684603
reference_id
reference_type
scores
url https://hackerone.com/reports/684603
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1749652
reference_id 1749652
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1749652
8
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://seclists.org/bugtraq/2020/Feb/36
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
reference_id 6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940010
reference_id 940010
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940010
11
reference_url https://security.archlinux.org/AVG-1982
reference_id AVG-1982
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1982
12
reference_url https://curl.haxx.se/docs/CVE-2019-5482.html
reference_id CVE-2019-5482.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://curl.haxx.se/docs/CVE-2019-5482.html
13
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://www.debian.org/security/2020/dsa-4633
14
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.gentoo.org/glsa/202003-29
15
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
reference_id msg00048.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
16
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
reference_id msg00055.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
17
reference_url https://security.netapp.com/advisory/ntap-20191004-0003/
reference_id ntap-20191004-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.netapp.com/advisory/ntap-20191004-0003/
18
reference_url https://security.netapp.com/advisory/ntap-20200416-0003/
reference_id ntap-20200416-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://security.netapp.com/advisory/ntap-20200416-0003/
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
reference_id RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
20
reference_url https://access.redhat.com/errata/RHSA-2020:0250
reference_id RHSA-2020:0250
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0250
21
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
22
reference_url https://access.redhat.com/errata/RHSA-2020:3916
reference_id RHSA-2020:3916
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3916
23
reference_url https://access.redhat.com/errata/RHSA-2021:0759
reference_id RHSA-2021:0759
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0759
24
reference_url https://access.redhat.com/errata/RHSA-2021:0877
reference_id RHSA-2021:0877
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0877
25
reference_url https://access.redhat.com/errata/RHSA-2021:0949
reference_id RHSA-2021:0949
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0949
26
reference_url https://access.redhat.com/errata/RHSA-2021:1027
reference_id RHSA-2021:1027
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1027
27
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
reference_id UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:55:46Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
28
reference_url https://usn.ubuntu.com/4129-1/
reference_id USN-4129-1
reference_type
scores
url https://usn.ubuntu.com/4129-1/
29
reference_url https://usn.ubuntu.com/4129-2/
reference_id USN-4129-2
reference_type
scores
url https://usn.ubuntu.com/4129-2/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
2
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2019-5482
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4zcd-rbx3-qye5
10
url VCID-51ac-1jc2-vfed
vulnerability_id VCID-51ac-1jc2-vfed
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8622.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8622
reference_id
reference_type
scores
0
value 0.0185
scoring_system epss
scoring_elements 0.83373
published_at 2026-06-05T12:55:00Z
1
value 0.0185
scoring_system epss
scoring_elements 0.83349
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8622
2
reference_url https://curl.se/docs/CVE-2016-8622.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8622.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388386
reference_id 1388386
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388386
16
reference_url http://www.securityfocus.com/bid/94105
reference_id 94105
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url http://www.securityfocus.com/bid/94105
17
reference_url https://curl.haxx.se/docs/adv_20161102H.html
reference_id adv_20161102H.html
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url https://curl.haxx.se/docs/adv_20161102H.html
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
20
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
21
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
22
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
23
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
24
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url https://security.gentoo.org/glsa/201701-47
25
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8622
reference_id show_bug.cgi?id=CVE-2016-8622
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8622
26
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:54:47Z/
url https://www.tenable.com/security/tns-2016-21
27
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8622
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-51ac-1jc2-vfed
11
url VCID-5m1h-d3cm-dqfu
vulnerability_id VCID-5m1h-d3cm-dqfu
summary The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3237.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3237.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3237
reference_id
reference_type
scores
0
value 0.05127
scoring_system epss
scoring_elements 0.90022
published_at 2026-06-04T12:55:00Z
1
value 0.05127
scoring_system epss
scoring_elements 0.90038
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3237
2
reference_url https://curl.se/docs/CVE-2015-3237.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3237.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3237
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3237
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1233814
reference_id 1233814
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1233814
5
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3237
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5m1h-d3cm-dqfu
12
url VCID-5sem-gndf-97e6
vulnerability_id VCID-5sem-gndf-97e6
summary The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3144.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3144
reference_id
reference_type
scores
0
value 0.01191
scoring_system epss
scoring_elements 0.79179
published_at 2026-06-04T12:55:00Z
1
value 0.01191
scoring_system epss
scoring_elements 0.79205
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3144
2
reference_url https://curl.se/docs/CVE-2015-3144.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3144.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213335
reference_id 1213335
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213335
5
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
6
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3144
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5sem-gndf-97e6
13
url VCID-5svr-3vv9-mqea
vulnerability_id VCID-5svr-3vv9-mqea
summary When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000100.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000100
reference_id
reference_type
scores
0
value 0.00618
scoring_system epss
scoring_elements 0.70384
published_at 2026-06-05T12:55:00Z
1
value 0.00618
scoring_system epss
scoring_elements 0.70342
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000100
2
reference_url https://curl.se/docs/CVE-2017-1000100.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-1000100.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.5
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:P/I:N/A:N
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/100286
reference_id 100286
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url http://www.securityfocus.com/bid/100286
8
reference_url http://www.securitytracker.com/id/1039118
reference_id 1039118
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url http://www.securitytracker.com/id/1039118
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1478310
reference_id 1478310
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1478310
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871555
reference_id 871555
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871555
11
reference_url https://curl.haxx.se/docs/adv_20170809B.html
reference_id adv_20170809B.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url https://curl.haxx.se/docs/adv_20170809B.html
12
reference_url https://security.archlinux.org/ASA-201708-16
reference_id ASA-201708-16
reference_type
scores
url https://security.archlinux.org/ASA-201708-16
13
reference_url https://security.archlinux.org/ASA-201710-3
reference_id ASA-201710-3
reference_type
scores
url https://security.archlinux.org/ASA-201710-3
14
reference_url https://security.archlinux.org/ASA-201710-4
reference_id ASA-201710-4
reference_type
scores
url https://security.archlinux.org/ASA-201710-4
15
reference_url https://security.archlinux.org/ASA-201710-5
reference_id ASA-201710-5
reference_type
scores
url https://security.archlinux.org/ASA-201710-5
16
reference_url https://security.archlinux.org/ASA-201710-6
reference_id ASA-201710-6
reference_type
scores
url https://security.archlinux.org/ASA-201710-6
17
reference_url https://security.archlinux.org/ASA-201710-7
reference_id ASA-201710-7
reference_type
scores
url https://security.archlinux.org/ASA-201710-7
18
reference_url https://security.archlinux.org/AVG-370
reference_id AVG-370
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-370
19
reference_url https://security.archlinux.org/AVG-371
reference_id AVG-371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-371
20
reference_url https://security.archlinux.org/AVG-386
reference_id AVG-386
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-386
21
reference_url https://security.archlinux.org/AVG-387
reference_id AVG-387
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-387
22
reference_url https://security.archlinux.org/AVG-388
reference_id AVG-388
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-388
23
reference_url https://security.archlinux.org/AVG-389
reference_id AVG-389
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-389
24
reference_url http://www.debian.org/security/2017/dsa-3992
reference_id dsa-3992
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url http://www.debian.org/security/2017/dsa-3992
25
reference_url https://security.gentoo.org/glsa/201709-14
reference_id GLSA-201709-14
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url https://security.gentoo.org/glsa/201709-14
26
reference_url https://support.apple.com/HT208221
reference_id HT208221
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:34:47Z/
url https://support.apple.com/HT208221
27
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
28
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-1000100
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5svr-3vv9-mqea
14
url VCID-5ujs-47hf-g7gj
vulnerability_id VCID-5ujs-47hf-g7gj
summary A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000122.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000122
reference_id
reference_type
scores
0
value 0.01639
scoring_system epss
scoring_elements 0.82277
published_at 2026-06-04T12:55:00Z
1
value 0.01639
scoring_system epss
scoring_elements 0.82306
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000122
2
reference_url https://curl.se/docs/CVE-2018-1000122.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000122.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1553398
reference_id 1553398
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1553398
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
9
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
10
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
11
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
12
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
13
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
14
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
15
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
16
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
17
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
18
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
19
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
20
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
21
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000122
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ujs-47hf-g7gj
15
url VCID-5xjw-u8ad-n3g5
vulnerability_id VCID-5xjw-u8ad-n3g5
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8615.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
reference_id
reference_type
scores
0
value 0.04293
scoring_system epss
scoring_elements 0.89065
published_at 2026-06-05T12:55:00Z
1
value 0.04293
scoring_system epss
scoring_elements 0.89048
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8615
2
reference_url https://curl.se/docs/CVE-2016-8615.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8615.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388370
reference_id 1388370
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388370
16
reference_url http://www.securityfocus.com/bid/94096
reference_id 94096
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url http://www.securityfocus.com/bid/94096
17
reference_url https://curl.haxx.se/docs/adv_20161102A.html
reference_id adv_20161102A.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/docs/adv_20161102A.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8615.patch
reference_id CVE-2016-8615.patch
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://curl.haxx.se/CVE-2016-8615.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
reference_id show_bug.cgi?id=CVE-2016-8615
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:35:21Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8615
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5xjw-u8ad-n3g5
16
url VCID-6745-tyba-33fa
vulnerability_id VCID-6745-tyba-33fa
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000301.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000301
reference_id
reference_type
scores
0
value 0.02845
scoring_system epss
scoring_elements 0.86486
published_at 2026-06-04T12:55:00Z
1
value 0.02845
scoring_system epss
scoring_elements 0.86509
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000301
2
reference_url https://curl.se/docs/CVE-2018-1000301.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000301.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301
4
reference_url http://www.securitytracker.com/id/1040931
reference_id 1040931
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url http://www.securitytracker.com/id/1040931
5
reference_url http://www.securityfocus.com/bid/104225
reference_id 104225
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url http://www.securityfocus.com/bid/104225
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1575536
reference_id 1575536
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1575536
7
reference_url https://usn.ubuntu.com/3648-1/
reference_id 3648-1
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://usn.ubuntu.com/3648-1/
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898856
reference_id 898856
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898856
9
reference_url https://curl.haxx.se/docs/adv_2018-b138.html
reference_id adv_2018-b138.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://curl.haxx.se/docs/adv_2018-b138.html
10
reference_url https://security.archlinux.org/ASA-201805-13
reference_id ASA-201805-13
reference_type
scores
url https://security.archlinux.org/ASA-201805-13
11
reference_url https://security.archlinux.org/ASA-201805-14
reference_id ASA-201805-14
reference_type
scores
url https://security.archlinux.org/ASA-201805-14
12
reference_url https://security.archlinux.org/ASA-201805-15
reference_id ASA-201805-15
reference_type
scores
url https://security.archlinux.org/ASA-201805-15
13
reference_url https://security.archlinux.org/ASA-201805-16
reference_id ASA-201805-16
reference_type
scores
url https://security.archlinux.org/ASA-201805-16
14
reference_url https://security.archlinux.org/ASA-201805-17
reference_id ASA-201805-17
reference_type
scores
url https://security.archlinux.org/ASA-201805-17
15
reference_url https://security.archlinux.org/ASA-201805-18
reference_id ASA-201805-18
reference_type
scores
url https://security.archlinux.org/ASA-201805-18
16
reference_url https://security.archlinux.org/AVG-694
reference_id AVG-694
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-694
17
reference_url https://security.archlinux.org/AVG-695
reference_id AVG-695
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-695
18
reference_url https://security.archlinux.org/AVG-696
reference_id AVG-696
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-696
19
reference_url https://security.archlinux.org/AVG-697
reference_id AVG-697
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-697
20
reference_url https://security.archlinux.org/AVG-698
reference_id AVG-698
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-698
21
reference_url https://security.archlinux.org/AVG-699
reference_id AVG-699
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-699
22
reference_url https://www.debian.org/security/2018/dsa-4202
reference_id dsa-4202
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://www.debian.org/security/2018/dsa-4202
23
reference_url https://security.gentoo.org/glsa/201806-05
reference_id GLSA-201806-05
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://security.gentoo.org/glsa/201806-05
24
reference_url https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:58:33Z/
url https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000301
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6745-tyba-33fa
17
url VCID-6rk4-vb5u-bkg6
vulnerability_id VCID-6rk4-vb5u-bkg6
summary curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5420.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5420
reference_id
reference_type
scores
0
value 0.01071
scoring_system epss
scoring_elements 0.7808
published_at 2026-06-04T12:55:00Z
1
value 0.01071
scoring_system epss
scoring_elements 0.78108
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5420
2
reference_url https://curl.se/docs/CVE-2016-5420.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5420.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1362190
reference_id 1362190
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1362190
8
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
9
reference_url https://access.redhat.com/errata/RHSA-2016:2575
reference_id RHSA-2016:2575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2575
10
reference_url https://access.redhat.com/errata/RHSA-2016:2957
reference_id RHSA-2016:2957
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2957
11
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-5420
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6rk4-vb5u-bkg6
18
url VCID-738z-myg9-37hr
vulnerability_id VCID-738z-myg9-37hr
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
reference_id
reference_type
scores
0
value 0.00314
scoring_system epss
scoring_elements 0.54842
published_at 2026-06-04T12:55:00Z
1
value 0.00314
scoring_system epss
scoring_elements 0.54901
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27774
2
reference_url https://curl.se/docs/CVE-2022-27774.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27774.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1543773
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://hackerone.com/reports/1543773
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
reference_id 1010254
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010254
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
reference_id 2077547
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2077547
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:41:23Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-27774
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-738z-myg9-37hr
19
url VCID-7jrx-ykk8-h3gp
vulnerability_id VCID-7jrx-ykk8-h3gp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8817.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
reference_id
reference_type
scores
0
value 0.00735
scoring_system epss
scoring_elements 0.73207
published_at 2026-06-05T12:55:00Z
1
value 0.00735
scoring_system epss
scoring_elements 0.73169
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
2
reference_url https://curl.se/docs/CVE-2017-8817.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8817.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
1
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securityfocus.com/bid/102057
reference_id 102057
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securityfocus.com/bid/102057
7
reference_url http://www.securitytracker.com/id/1039897
reference_id 1039897
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securitytracker.com/id/1039897
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1515760
reference_id 1515760
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1515760
9
reference_url https://curl.haxx.se/docs/adv_2017-ae72.html
reference_id adv_2017-ae72.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://curl.haxx.se/docs/adv_2017-ae72.html
10
reference_url https://security.archlinux.org/ASA-201711-33
reference_id ASA-201711-33
reference_type
scores
url https://security.archlinux.org/ASA-201711-33
11
reference_url https://security.archlinux.org/ASA-201711-34
reference_id ASA-201711-34
reference_type
scores
url https://security.archlinux.org/ASA-201711-34
12
reference_url https://security.archlinux.org/ASA-201711-35
reference_id ASA-201711-35
reference_type
scores
url https://security.archlinux.org/ASA-201711-35
13
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
14
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
15
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
16
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
17
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
18
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
19
reference_url https://security.archlinux.org/AVG-524
reference_id AVG-524
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-524
20
reference_url https://security.archlinux.org/AVG-525
reference_id AVG-525
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-525
21
reference_url https://security.archlinux.org/AVG-526
reference_id AVG-526
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-526
22
reference_url http://security.cucumberlinux.com/security/details.php?id=162
reference_id details.php?id=162
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://security.cucumberlinux.com/security/details.php?id=162
23
reference_url https://www.debian.org/security/2017/dsa-4051
reference_id dsa-4051
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://www.debian.org/security/2017/dsa-4051
24
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://security.gentoo.org/glsa/201712-04
25
reference_url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
reference_id msg00040.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
26
reference_url https://usn.ubuntu.com/3498-1/
reference_id USN-3498-1
reference_type
scores
url https://usn.ubuntu.com/3498-1/
27
reference_url https://usn.ubuntu.com/3498-2/
reference_id USN-3498-2
reference_type
scores
url https://usn.ubuntu.com/3498-2/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-8817
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7jrx-ykk8-h3gp
20
url VCID-7yvu-s3p2-sfhc
vulnerability_id VCID-7yvu-s3p2-sfhc
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22947.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22947.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22947
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48856
published_at 2026-06-04T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48918
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22947
2
reference_url https://curl.se/docs/CVE-2021-22947.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22947.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1334763
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://hackerone.com/reports/1334763
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2003191
reference_id 2003191
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2003191
21
reference_url http://seclists.org/fulldisclosure/2022/Mar/29
reference_id 29
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url http://seclists.org/fulldisclosure/2022/Mar/29
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
reference_id APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
23
reference_url https://security.archlinux.org/AVG-2384
reference_id AVG-2384
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2384
24
reference_url https://security.archlinux.org/AVG-2385
reference_id AVG-2385
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2385
25
reference_url https://security.archlinux.org/AVG-2386
reference_id AVG-2386
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2386
26
reference_url https://security.archlinux.org/AVG-2387
reference_id AVG-2387
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2387
27
reference_url https://security.archlinux.org/AVG-2388
reference_id AVG-2388
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2388
28
reference_url https://security.archlinux.org/AVG-2389
reference_id AVG-2389
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2389
29
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://www.debian.org/security/2022/dsa-5197
30
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://security.gentoo.org/glsa/202212-01
31
reference_url https://support.apple.com/kb/HT213183
reference_id HT213183
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://support.apple.com/kb/HT213183
32
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
33
reference_url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
34
reference_url https://security.netapp.com/advisory/ntap-20211029-0003/
reference_id ntap-20211029-0003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://security.netapp.com/advisory/ntap-20211029-0003/
35
reference_url https://access.redhat.com/errata/RHSA-2021:4059
reference_id RHSA-2021:4059
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4059
36
reference_url https://access.redhat.com/errata/RHSA-2022:0635
reference_id RHSA-2022:0635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0635
37
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
38
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
reference_id RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:17Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
39
reference_url https://usn.ubuntu.com/5079-1/
reference_id USN-5079-1
reference_type
scores
url https://usn.ubuntu.com/5079-1/
40
reference_url https://usn.ubuntu.com/5079-2/
reference_id USN-5079-2
reference_type
scores
url https://usn.ubuntu.com/5079-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22947
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7yvu-s3p2-sfhc
21
url VCID-7z3h-9pk3-rqct
vulnerability_id VCID-7z3h-9pk3-rqct
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32207.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32207.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32207
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46333
published_at 2026-06-04T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.464
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32207
2
reference_url https://curl.se/docs/CVE-2022-32207.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32207.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1573634
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://hackerone.com/reports/1573634
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099305
reference_id 2099305
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099305
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
23
reference_url https://security.archlinux.org/AVG-2817
reference_id AVG-2817
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2817
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://support.apple.com/kb/HT213488
28
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-04-23T13:31:36Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
29
reference_url https://access.redhat.com/errata/RHSA-2022:6157
reference_id RHSA-2022:6157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6157
30
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
31
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
32
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-32207
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7z3h-9pk3-rqct
22
url VCID-8j6v-xbhy-7uc2
vulnerability_id VCID-8j6v-xbhy-7uc2
summary cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
reference_id
reference_type
scores
0
value 0.04659
scoring_system epss
scoring_elements 0.89499
published_at 2026-06-04T12:55:00Z
1
value 0.04659
scoring_system epss
scoring_elements 0.89517
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
2
reference_url https://curl.se/docs/CVE-2015-3143.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3143.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
reference_id 1213306
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3143
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8j6v-xbhy-7uc2
23
url VCID-9rvz-5w86-u7e5
vulnerability_id VCID-9rvz-5w86-u7e5
summary cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3236.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3236.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3236
reference_id
reference_type
scores
0
value 0.04525
scoring_system epss
scoring_elements 0.89348
published_at 2026-06-04T12:55:00Z
1
value 0.04525
scoring_system epss
scoring_elements 0.89366
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3236
2
reference_url https://curl.se/docs/CVE-2015-3236.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3236.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3236
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3236
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1233816
reference_id 1233816
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1233816
5
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3236
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9rvz-5w86-u7e5
24
url VCID-a58z-fu87-9ybs
vulnerability_id VCID-a58z-fu87-9ybs
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22898.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
reference_id
reference_type
scores
0
value 0.00137
scoring_system epss
scoring_elements 0.33296
published_at 2026-06-04T12:55:00Z
1
value 0.00137
scoring_system epss
scoring_elements 0.33397
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22898
2
reference_url https://curl.se/docs/CVE-2021-22898.html
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://curl.se/docs/CVE-2021-22898.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1176461
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://hackerone.com/reports/1176461
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
reference_id 1964887
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1964887
21
reference_url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_id 39ce47f219b09c380b81f89fe54ac586c8db6bde
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde
22
reference_url http://www.openwall.com/lists/oss-security/2021/07/21/4
reference_id 4
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url http://www.openwall.com/lists/oss-security/2021/07/21/4
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
reference_id 989228
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989228
24
reference_url https://security.archlinux.org/ASA-202106-4
reference_id ASA-202106-4
reference_type
scores
url https://security.archlinux.org/ASA-202106-4
25
reference_url https://security.archlinux.org/ASA-202106-5
reference_id ASA-202106-5
reference_type
scores
url https://security.archlinux.org/ASA-202106-5
26
reference_url https://security.archlinux.org/ASA-202106-6
reference_id ASA-202106-6
reference_type
scores
url https://security.archlinux.org/ASA-202106-6
27
reference_url https://security.archlinux.org/ASA-202106-7
reference_id ASA-202106-7
reference_type
scores
url https://security.archlinux.org/ASA-202106-7
28
reference_url https://security.archlinux.org/ASA-202106-8
reference_id ASA-202106-8
reference_type
scores
url https://security.archlinux.org/ASA-202106-8
29
reference_url https://security.archlinux.org/ASA-202106-9
reference_id ASA-202106-9
reference_type
scores
url https://security.archlinux.org/ASA-202106-9
30
reference_url https://security.archlinux.org/AVG-1995
reference_id AVG-1995
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1995
31
reference_url https://security.archlinux.org/AVG-1996
reference_id AVG-1996
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1996
32
reference_url https://security.archlinux.org/AVG-1997
reference_id AVG-1997
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1997
33
reference_url https://security.archlinux.org/AVG-1998
reference_id AVG-1998
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1998
34
reference_url https://security.archlinux.org/AVG-1999
reference_id AVG-1999
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1999
35
reference_url https://security.archlinux.org/AVG-2000
reference_id AVG-2000
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2000
36
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://www.debian.org/security/2022/dsa-5197
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
38
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
url https://security.gentoo.org/glsa/202105-36
39
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
40
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
41
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
reference_id POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POOC3UV7V6L4CJ5KA2PTWTNUV5Y72T3Q/
42
reference_url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_id rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-28T18:31:55Z/
url https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
43
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
44
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
45
reference_url https://usn.ubuntu.com/5021-2/
reference_id USN-5021-2
reference_type
scores
url https://usn.ubuntu.com/5021-2/
46
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22898
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a58z-fu87-9ybs
25
url VCID-av4f-gxku-qbhp
vulnerability_id VCID-av4f-gxku-qbhp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8624.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8624
reference_id
reference_type
scores
0
value 0.01363
scoring_system epss
scoring_elements 0.8054
published_at 2026-06-05T12:55:00Z
1
value 0.01363
scoring_system epss
scoring_elements 0.80514
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8624
2
reference_url https://curl.se/docs/CVE-2016-8624.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8624.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388390
reference_id 1388390
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388390
16
reference_url http://www.securityfocus.com/bid/94103
reference_id 94103
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url http://www.securityfocus.com/bid/94103
17
reference_url https://curl.haxx.se/docs/adv_20161102J.html
reference_id adv_20161102J.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://curl.haxx.se/docs/adv_20161102J.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://security.gentoo.org/glsa/201701-47
31
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
32
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
reference_id rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624
reference_id show_bug.cgi?id=CVE-2016-8624
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:39:44Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8624
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-av4f-gxku-qbhp
26
url VCID-azcz-b8f2-63be
vulnerability_id VCID-azcz-b8f2-63be
summary A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27533.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
reference_id
reference_type
scores
0
value 0.00179
scoring_system epss
scoring_elements 0.39261
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27533
2
reference_url https://curl.se/docs/CVE-2023-27533.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27533.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1891474
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://hackerone.com/reports/1891474
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
reference_id 2179062
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179062
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
8
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.gentoo.org/glsa/202310-12
9
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
10
reference_url https://security.netapp.com/advisory/ntap-20230420-0011/
reference_id ntap-20230420-0011
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-02-13T20:09:15Z/
url https://security.netapp.com/advisory/ntap-20230420-0011/
11
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
12
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
13
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
14
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
15
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-27533
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-azcz-b8f2-63be
27
url VCID-b76g-cq2w-t3a3
vulnerability_id VCID-b76g-cq2w-t3a3
summary Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0249.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0249.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0249
reference_id
reference_type
scores
0
value 0.44202
scoring_system epss
scoring_elements 0.97617
published_at 2026-06-04T12:55:00Z
1
value 0.44202
scoring_system epss
scoring_elements 0.9762
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0249
2
reference_url https://curl.se/docs/CVE-2013-0249.html
reference_id
reference_type
scores
0
value Critical
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-0249.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0249
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0249
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700002
reference_id 700002
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700002
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=906779
reference_id 906779
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=906779
6
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/24487.py
reference_id CVE-2013-0249;OSVDB-89988
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/24487.py
7
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
8
reference_url https://usn.ubuntu.com/1721-1/
reference_id USN-1721-1
reference_type
scores
url https://usn.ubuntu.com/1721-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-0249
risk_score 10.0
exploitability 2.0
weighted_severity 7.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b76g-cq2w-t3a3
28
url VCID-bb6v-z8yg-6fe3
vulnerability_id VCID-bb6v-z8yg-6fe3
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3823.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3823
reference_id
reference_type
scores
0
value 0.01568
scoring_system epss
scoring_elements 0.81855
published_at 2026-06-04T12:55:00Z
1
value 0.01568
scoring_system epss
scoring_elements 0.81889
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3823
2
reference_url https://curl.se/docs/CVE-2019-3823.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-3823.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106950
reference_id 106950
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url http://www.securityfocus.com/bid/106950
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670256
reference_id 1670256
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670256
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2019-3823.html
reference_id CVE-2019-3823.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://curl.haxx.se/docs/CVE-2019-3823.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://security.gentoo.org/glsa/201903-03
24
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
25
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://access.redhat.com/errata/RHSA-2019:3701
26
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3823
reference_id show_bug.cgi?id=CVE-2019-3823
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3823
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-936080.pdf
reference_id ssa-936080.pdf
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:04Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-936080.pdf
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2019-3823
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bb6v-z8yg-6fe3
29
url VCID-bx2m-n5ft-3be8
vulnerability_id VCID-bx2m-n5ft-3be8
summary 
Improper Authentication
An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27535.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.11244
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27535
2
reference_url https://curl.se/docs/CVE-2023-27535.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27535.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1892780
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://hackerone.com/reports/1892780
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
reference_id 2179073
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179073
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id 36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
reference_id CVE-2023-27535
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27535
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
12
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-03T18:24:11Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
13
reference_url https://access.redhat.com/errata/RHSA-2023:2650
reference_id RHSA-2023:2650
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2650
14
reference_url https://access.redhat.com/errata/RHSA-2023:3106
reference_id RHSA-2023:3106
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3106
15
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
16
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
17
reference_url https://usn.ubuntu.com/5964-2/
reference_id USN-5964-2
reference_type
scores
url https://usn.ubuntu.com/5964-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-27535
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bx2m-n5ft-3be8
30
url VCID-cdar-9qhw-hke7
vulnerability_id VCID-cdar-9qhw-hke7
summary The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0755.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0755
reference_id
reference_type
scores
0
value 0.00346
scoring_system epss
scoring_elements 0.57476
published_at 2026-06-04T12:55:00Z
1
value 0.00346
scoring_system epss
scoring_elements 0.57529
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0755
2
reference_url https://curl.se/docs/CVE-2016-0755.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-0755.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1302263
reference_id 1302263
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1302263
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
6
reference_url https://usn.ubuntu.com/2882-1/
reference_id USN-2882-1
reference_type
scores
url https://usn.ubuntu.com/2882-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-0755
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdar-9qhw-hke7
31
url VCID-cdzf-3ydt-8bdk
vulnerability_id VCID-cdzf-3ydt-8bdk
summary When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32221.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
reference_id
reference_type
scores
0
value 0.01853
scoring_system epss
scoring_elements 0.83366
published_at 2026-06-04T12:55:00Z
1
value 0.01853
scoring_system epss
scoring_elements 0.8339
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32221
2
reference_url https://curl.se/docs/CVE-2022-32221.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32221.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/1704017
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://hackerone.com/reports/1704017
7
reference_url http://seclists.org/fulldisclosure/2023/Jan/19
reference_id 19
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/19
8
reference_url http://seclists.org/fulldisclosure/2023/Jan/20
reference_id 20
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://seclists.org/fulldisclosure/2023/Jan/20
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
reference_id 2135411
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2135411
10
reference_url http://www.openwall.com/lists/oss-security/2023/05/17/4
reference_id 4
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url http://www.openwall.com/lists/oss-security/2023/05/17/4
11
reference_url https://www.debian.org/security/2023/dsa-5330
reference_id dsa-5330
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://www.debian.org/security/2023/dsa-5330
12
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.gentoo.org/glsa/202212-01
13
reference_url https://support.apple.com/kb/HT213604
reference_id HT213604
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213604
14
reference_url https://support.apple.com/kb/HT213605
reference_id HT213605
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://support.apple.com/kb/HT213605
15
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
reference_id msg00028.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
16
reference_url https://security.netapp.com/advisory/ntap-20230110-0006/
reference_id ntap-20230110-0006
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230110-0006/
17
reference_url https://security.netapp.com/advisory/ntap-20230208-0002/
reference_id ntap-20230208-0002
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-05-20T15:51:51Z/
url https://security.netapp.com/advisory/ntap-20230208-0002/
18
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
19
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
20
reference_url https://access.redhat.com/errata/RHSA-2023:0333
reference_id RHSA-2023:0333
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0333
21
reference_url https://access.redhat.com/errata/RHSA-2023:4139
reference_id RHSA-2023:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4139
22
reference_url https://usn.ubuntu.com/5702-1/
reference_id USN-5702-1
reference_type
scores
url https://usn.ubuntu.com/5702-1/
23
reference_url https://usn.ubuntu.com/5702-2/
reference_id USN-5702-2
reference_type
scores
url https://usn.ubuntu.com/5702-2/
24
reference_url https://usn.ubuntu.com/5823-1/
reference_id USN-5823-1
reference_type
scores
url https://usn.ubuntu.com/5823-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-32221
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdzf-3ydt-8bdk
32
url VCID-cfry-nx5h-kudv
vulnerability_id VCID-cfry-nx5h-kudv
summary An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decompression chain" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a "malloc bomb", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23916.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-23916.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23916
reference_id
reference_type
scores
0
value 0.00066
scoring_system epss
scoring_elements 0.20718
published_at 2026-06-04T12:55:00Z
1
value 0.00066
scoring_system epss
scoring_elements 0.20793
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23916
2
reference_url https://curl.se/docs/CVE-2023-23916.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-23916.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1826048
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://hackerone.com/reports/1826048
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031371
reference_id 1031371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031371
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2167815
reference_id 2167815
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2167815
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
reference_id BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
9
reference_url https://www.debian.org/security/2023/dsa-5365
reference_id dsa-5365
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://www.debian.org/security/2023/dsa-5365
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
12
reference_url https://security.netapp.com/advisory/ntap-20230309-0006/
reference_id ntap-20230309-0006
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-12T18:24:35Z/
url https://security.netapp.com/advisory/ntap-20230309-0006/
13
reference_url https://access.redhat.com/errata/RHSA-2023:1140
reference_id RHSA-2023:1140
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1140
14
reference_url https://access.redhat.com/errata/RHSA-2023:1701
reference_id RHSA-2023:1701
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1701
15
reference_url https://access.redhat.com/errata/RHSA-2023:1842
reference_id RHSA-2023:1842
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1842
16
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
17
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
18
reference_url https://access.redhat.com/errata/RHSA-2023:3460
reference_id RHSA-2023:3460
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3460
19
reference_url https://access.redhat.com/errata/RHSA-2023:4139
reference_id RHSA-2023:4139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4139
20
reference_url https://usn.ubuntu.com/5891-1/
reference_id USN-5891-1
reference_type
scores
url https://usn.ubuntu.com/5891-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-23916
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cfry-nx5h-kudv
33
url VCID-cjyz-fdnv-b3g4
vulnerability_id VCID-cjyz-fdnv-b3g4
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22945.json
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22945.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22945
reference_id
reference_type
scores
0
value 0.00353
scoring_system epss
scoring_elements 0.58013
published_at 2026-06-05T12:55:00Z
1
value 0.00353
scoring_system epss
scoring_elements 0.57961
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22945
2
reference_url https://curl.se/docs/CVE-2021-22945.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22945.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1269242
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://hackerone.com/reports/1269242
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2001527
reference_id 2001527
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2001527
21
reference_url http://seclists.org/fulldisclosure/2022/Mar/29
reference_id 29
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url http://seclists.org/fulldisclosure/2022/Mar/29
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
reference_id APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
23
reference_url https://security.archlinux.org/AVG-2384
reference_id AVG-2384
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2384
24
reference_url https://security.archlinux.org/AVG-2385
reference_id AVG-2385
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2385
25
reference_url https://security.archlinux.org/AVG-2386
reference_id AVG-2386
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2386
26
reference_url https://security.archlinux.org/AVG-2387
reference_id AVG-2387
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2387
27
reference_url https://security.archlinux.org/AVG-2388
reference_id AVG-2388
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2388
28
reference_url https://security.archlinux.org/AVG-2389
reference_id AVG-2389
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2389
29
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22945
reference_id CVE-2021-22945
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22945
30
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://www.debian.org/security/2022/dsa-5197
31
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://security.gentoo.org/glsa/202212-01
32
reference_url https://support.apple.com/kb/HT213183
reference_id HT213183
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://support.apple.com/kb/HT213183
33
reference_url https://security.netapp.com/advisory/ntap-20211029-0003/
reference_id ntap-20211029-0003
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://security.netapp.com/advisory/ntap-20211029-0003/
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
reference_id RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-28T15:53:40Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
35
reference_url https://usn.ubuntu.com/5079-1/
reference_id USN-5079-1
reference_type
scores
url https://usn.ubuntu.com/5079-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22945
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cjyz-fdnv-b3g4
34
url VCID-cmcn-f8ws-q3h2
vulnerability_id VCID-cmcn-f8ws-q3h2
summary The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-6422
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48857
published_at 2026-06-04T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48919
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-6422
2
reference_url https://curl.se/docs/CVE-2013-6422.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-6422.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6422
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6422
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1037918
reference_id 1037918
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1037918
5
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
6
reference_url https://usn.ubuntu.com/2058-1/
reference_id USN-2058-1
reference_type
scores
url https://usn.ubuntu.com/2058-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-6422
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cmcn-f8ws-q3h2
35
url VCID-dj48-3dkt-dbdh
vulnerability_id VCID-dj48-3dkt-dbdh
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8818.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
reference_id
reference_type
scores
0
value 0.00825
scoring_system epss
scoring_elements 0.74852
published_at 2026-06-05T12:55:00Z
1
value 0.00825
scoring_system epss
scoring_elements 0.74821
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
2
reference_url https://curl.se/docs/CVE-2017-8818.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8818.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1517691
reference_id 1517691
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1517691
5
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
6
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
7
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
8
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
9
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
10
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
11
reference_url https://security.archlinux.org/AVG-527
reference_id AVG-527
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-527
12
reference_url https://security.archlinux.org/AVG-528
reference_id AVG-528
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-528
13
reference_url https://security.archlinux.org/AVG-529
reference_id AVG-529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-529
14
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
url https://security.gentoo.org/glsa/201712-04
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-8818
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dj48-3dkt-dbdh
36
url VCID-dndt-tapy-23d2
vulnerability_id VCID-dndt-tapy-23d2
summary curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5419.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
reference_id
reference_type
scores
0
value 0.01912
scoring_system epss
scoring_elements 0.83631
published_at 2026-06-04T12:55:00Z
1
value 0.01912
scoring_system epss
scoring_elements 0.83655
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5419
2
reference_url https://curl.se/docs/CVE-2016-5419.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5419.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1362183
reference_id 1362183
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1362183
8
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
9
reference_url https://access.redhat.com/errata/RHSA-2016:2575
reference_id RHSA-2016:2575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2575
10
reference_url https://access.redhat.com/errata/RHSA-2016:2957
reference_id RHSA-2016:2957
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2957
11
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-5419
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dndt-tapy-23d2
37
url VCID-e4qf-7gqs-qyg3
vulnerability_id VCID-e4qf-7gqs-qyg3
summary cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
reference_id
reference_type
scores
0
value 0.01266
scoring_system epss
scoring_elements 0.79799
published_at 2026-06-04T12:55:00Z
1
value 0.01266
scoring_system epss
scoring_elements 0.79825
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
2
reference_url https://curl.se/docs/CVE-2014-0015.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0015.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
reference_id 1053903
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
6
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
7
reference_url https://usn.ubuntu.com/2097-1/
reference_id USN-2097-1
reference_type
scores
url https://usn.ubuntu.com/2097-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0015
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4qf-7gqs-qyg3
38
url VCID-f276-amhj-9yfx
vulnerability_id VCID-f276-amhj-9yfx
summary The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3153.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
reference_id
reference_type
scores
0
value 0.08372
scoring_system epss
scoring_elements 0.92451
published_at 2026-06-04T12:55:00Z
1
value 0.08372
scoring_system epss
scoring_elements 0.92464
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3153
2
reference_url https://curl.se/docs/CVE-2015-3153.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3153.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1217341
reference_id 1217341
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1217341
5
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3153
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f276-amhj-9yfx
39
url VCID-f7n8-zzhz-fuc8
vulnerability_id VCID-f7n8-zzhz-fuc8
summary 
Improper Certificate Validation
curl is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8286.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8286.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8286
reference_id
reference_type
scores
0
value 0.00286
scoring_system epss
scoring_elements 0.52393
published_at 2026-06-05T12:55:00Z
1
value 0.00286
scoring_system epss
scoring_elements 0.52333
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8286
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1048457
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://hackerone.com/reports/1048457
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1906096
reference_id 1906096
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1906096
13
reference_url http://seclists.org/fulldisclosure/2021/Apr/50
reference_id 50
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/50
14
reference_url http://seclists.org/fulldisclosure/2021/Apr/51
reference_id 51
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/51
15
reference_url http://seclists.org/fulldisclosure/2021/Apr/54
reference_id 54
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url http://seclists.org/fulldisclosure/2021/Apr/54
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977161
reference_id 977161
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977161
17
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8286
reference_id CVE-2020-8286
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8286
19
reference_url https://curl.se/docs/CVE-2020-8286.html
reference_id CVE-2020-8286.HTML
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://curl.se/docs/CVE-2020-8286.html
20
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
21
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://www.debian.org/security/2021/dsa-4881
22
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://security.gentoo.org/glsa/202012-14
23
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212325
24
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212326
25
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://support.apple.com/kb/HT212327
26
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
27
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
28
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
29
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
30
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
31
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
32
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
reference_id ssa-200951.pdf
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-15T15:29:39Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf
33
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8286
risk_score 3.4
exploitability 0.5
weighted_severity 6.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f7n8-zzhz-fuc8
40
url VCID-f8vu-23bb-5ue7
vulnerability_id VCID-f8vu-23bb-5ue7
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8816.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8816
reference_id
reference_type
scores
0
value 0.00454
scoring_system epss
scoring_elements 0.64191
published_at 2026-06-05T12:55:00Z
1
value 0.00454
scoring_system epss
scoring_elements 0.64147
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8816
2
reference_url https://curl.se/docs/CVE-2017-8816.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8816.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securityfocus.com/bid/101998
reference_id 101998
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securityfocus.com/bid/101998
7
reference_url http://www.securitytracker.com/id/1039896
reference_id 1039896
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securitytracker.com/id/1039896
8
reference_url http://www.securitytracker.com/id/1040608
reference_id 1040608
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://www.securitytracker.com/id/1040608
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1515757
reference_id 1515757
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1515757
10
reference_url https://curl.haxx.se/docs/adv_2017-12e7.html
reference_id adv_2017-12e7.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://curl.haxx.se/docs/adv_2017-12e7.html
11
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
12
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
13
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
14
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
15
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
16
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
17
reference_url https://security.archlinux.org/AVG-527
reference_id AVG-527
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-527
18
reference_url https://security.archlinux.org/AVG-528
reference_id AVG-528
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-528
19
reference_url https://security.archlinux.org/AVG-529
reference_id AVG-529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-529
20
reference_url http://security.cucumberlinux.com/security/details.php?id=161
reference_id details.php?id=161
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url http://security.cucumberlinux.com/security/details.php?id=161
21
reference_url https://www.debian.org/security/2017/dsa-4051
reference_id dsa-4051
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://www.debian.org/security/2017/dsa-4051
22
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:01:08Z/
url https://security.gentoo.org/glsa/201712-04
23
reference_url https://usn.ubuntu.com/3498-1/
reference_id USN-3498-1
reference_type
scores
url https://usn.ubuntu.com/3498-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-8816
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f8vu-23bb-5ue7
41
url VCID-f922-jx9w-mbc5
vulnerability_id VCID-f922-jx9w-mbc5
summary CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
reference_id
reference_type
scores
0
value 0.01225
scoring_system epss
scoring_elements 0.79462
published_at 2026-06-04T12:55:00Z
1
value 0.01225
scoring_system epss
scoring_elements 0.79489
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
2
reference_url https://curl.se/docs/CVE-2014-8150.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-8150.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
reference_id 1178692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
6
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
7
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
8
reference_url https://usn.ubuntu.com/2474-1/
reference_id USN-2474-1
reference_type
scores
url https://usn.ubuntu.com/2474-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-8150
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f922-jx9w-mbc5
42
url VCID-fhc8-r8gv-bugj
vulnerability_id VCID-fhc8-r8gv-bugj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22876.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
reference_id
reference_type
scores
0
value 0.00115
scoring_system epss
scoring_elements 0.29867
published_at 2026-06-05T12:55:00Z
1
value 0.00115
scoring_system epss
scoring_elements 0.29799
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22876
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1101882
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://hackerone.com/reports/1101882
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
reference_id 1941964
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1941964
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
reference_id 2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
reference_id 986269
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986269
15
reference_url https://security.archlinux.org/AVG-1753
reference_id AVG-1753
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1753
16
reference_url https://security.archlinux.org/AVG-1754
reference_id AVG-1754
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1754
17
reference_url https://security.archlinux.org/AVG-1755
reference_id AVG-1755
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1755
18
reference_url https://security.archlinux.org/AVG-1756
reference_id AVG-1756
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1756
19
reference_url https://security.archlinux.org/AVG-1757
reference_id AVG-1757
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1757
20
reference_url https://security.archlinux.org/AVG-1758
reference_id AVG-1758
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1758
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
reference_id CVE-2021-22876
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22876
22
reference_url https://curl.se/docs/CVE-2021-22876.html
reference_id CVE-2021-22876.HTML
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://curl.se/docs/CVE-2021-22876.html
23
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.gentoo.org/glsa/202105-36
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
reference_id ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
reference_id KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
26
reference_url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
reference_id msg00019.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html
27
reference_url https://security.netapp.com/advisory/ntap-20210521-0007/
reference_id ntap-20210521-0007
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:54:20Z/
url https://security.netapp.com/advisory/ntap-20210521-0007/
28
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
29
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
30
reference_url https://access.redhat.com/errata/RHSA-2021:4511
reference_id RHSA-2021:4511
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4511
31
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
32
reference_url https://usn.ubuntu.com/4898-1/
reference_id USN-4898-1
reference_type
scores
url https://usn.ubuntu.com/4898-1/
33
reference_url https://usn.ubuntu.com/4903-1/
reference_id USN-4903-1
reference_type
scores
url https://usn.ubuntu.com/4903-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22876
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhc8-r8gv-bugj
43
url VCID-fp66-fzqt-6yg7
vulnerability_id VCID-fp66-fzqt-6yg7
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8169.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8169
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24197
published_at 2026-06-04T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24296
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8169
2
reference_url https://curl.se/docs/CVE-2020-8169.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2020-8169.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/874778
reference_id
reference_type
scores
url https://hackerone.com/reports/874778
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1847916
reference_id 1847916
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1847916
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965280
reference_id 965280
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965280
15
reference_url https://security.archlinux.org/AVG-1194
reference_id AVG-1194
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1194
16
reference_url https://security.gentoo.org/glsa/202007-16
reference_id GLSA-202007-16
reference_type
scores
url https://security.gentoo.org/glsa/202007-16
17
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
18
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
19
reference_url https://usn.ubuntu.com/4402-1/
reference_id USN-4402-1
reference_type
scores
url https://usn.ubuntu.com/4402-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8169
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fp66-fzqt-6yg7
44
url VCID-g4n9-kg3s-pfcr
vulnerability_id VCID-g4n9-kg3s-pfcr
summary An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28321.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
reference_id
reference_type
scores
0
value 0.00297
scoring_system epss
scoring_elements 0.5335
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28321
2
reference_url https://curl.se/docs/CVE-2023-28321.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28321.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1950627
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://hackerone.com/reports/1950627
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
reference_id 2196786
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196786
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
reference_id msg00016.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4523
reference_id RHSA-2023:4523
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4523
20
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
21
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
22
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
23
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
24
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
25
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
26
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T15:54:13Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-28321
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g4n9-kg3s-pfcr
45
url VCID-g72q-eedp-aufb
vulnerability_id VCID-g72q-eedp-aufb
summary The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1944.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
reference_id
reference_type
scores
0
value 0.02482
scoring_system epss
scoring_elements 0.85568
published_at 2026-06-04T12:55:00Z
1
value 0.02482
scoring_system epss
scoring_elements 0.8559
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1944
2
reference_url https://curl.se/docs/CVE-2013-1944.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-1944.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
reference_id 705274
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705274
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=950577
reference_id 950577
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=950577
6
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
7
reference_url https://access.redhat.com/errata/RHSA-2013:0771
reference_id RHSA-2013:0771
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0771
8
reference_url https://usn.ubuntu.com/1801-1/
reference_id USN-1801-1
reference_type
scores
url https://usn.ubuntu.com/1801-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-1944
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g72q-eedp-aufb
46
url VCID-gnur-763x-qkcu
vulnerability_id VCID-gnur-763x-qkcu
summary cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3620.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3620
reference_id
reference_type
scores
0
value 0.01306
scoring_system epss
scoring_elements 0.80117
published_at 2026-06-04T12:55:00Z
1
value 0.01306
scoring_system epss
scoring_elements 0.80143
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3620
2
reference_url https://curl.se/docs/CVE-2014-3620.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3620.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3620
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1138846
reference_id 1138846
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1138846
5
reference_url https://usn.ubuntu.com/2346-1/
reference_id USN-2346-1
reference_type
scores
url https://usn.ubuntu.com/2346-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-3620
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gnur-763x-qkcu
47
url VCID-gud1-yg9u-zyfp
vulnerability_id VCID-gud1-yg9u-zyfp
summary 
Use After Free
Due to use of a dangling pointer, libcurl can use the wrong connection when sending data.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8231.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8231
reference_id
reference_type
scores
0
value 0.00159
scoring_system epss
scoring_elements 0.36534
published_at 2026-06-04T12:55:00Z
1
value 0.00159
scoring_system epss
scoring_elements 0.36628
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8231
2
reference_url https://curl.se/docs/CVE-2020-8231.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2020-8231.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/948876
reference_id
reference_type
scores
url https://hackerone.com/reports/948876
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1868032
reference_id 1868032
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1868032
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968831
reference_id 968831
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968831
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8231
reference_id CVE-2020-8231
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8231
16
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
url https://security.gentoo.org/glsa/202012-14
17
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
18
reference_url https://usn.ubuntu.com/4466-1/
reference_id USN-4466-1
reference_type
scores
url https://usn.ubuntu.com/4466-1/
19
reference_url https://usn.ubuntu.com/4466-2/
reference_id USN-4466-2
reference_type
scores
url https://usn.ubuntu.com/4466-2/
20
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8231
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gud1-yg9u-zyfp
48
url VCID-gueb-wzpx-ufb2
vulnerability_id VCID-gueb-wzpx-ufb2
summary 
Improper Authentication
An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27538.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27538.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27538
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01683
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27538
2
reference_url https://curl.se/docs/CVE-2023-27538.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27538.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27538
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1898475
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://hackerone.com/reports/1898475
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179103
reference_id 2179103
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179103
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27538
reference_id CVE-2023-27538
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-27538
9
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://security.gentoo.org/glsa/202310-12
10
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
reference_id msg00025.html
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
11
reference_url https://security.netapp.com/advisory/ntap-20230420-0010/
reference_id ntap-20230420-0010
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T14:52:04Z/
url https://security.netapp.com/advisory/ntap-20230420-0010/
12
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
13
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-27538
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gueb-wzpx-ufb2
49
url VCID-h6xj-mys4-pucf
vulnerability_id VCID-h6xj-mys4-pucf
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8177.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8177
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05265
published_at 2026-06-05T12:55:00Z
1
value 0.00019
scoring_system epss
scoring_elements 0.05244
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8177
2
reference_url https://curl.se/docs/CVE-2020-8177.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://curl.se/docs/CVE-2020-8177.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/887462
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://hackerone.com/reports/887462
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1847915
reference_id 1847915
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1847915
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965281
reference_id 965281
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=965281
15
reference_url https://security.archlinux.org/AVG-1194
reference_id AVG-1194
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1194
16
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T21:05:17Z/
url https://www.debian.org/security/2021/dsa-4881
17
reference_url https://security.gentoo.org/glsa/202007-16
reference_id GLSA-202007-16
reference_type
scores
url https://security.gentoo.org/glsa/202007-16
18
reference_url https://access.redhat.com/errata/RHSA-2020:4599
reference_id RHSA-2020:4599
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4599
19
reference_url https://access.redhat.com/errata/RHSA-2020:5002
reference_id RHSA-2020:5002
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5002
20
reference_url https://access.redhat.com/errata/RHSA-2020:5417
reference_id RHSA-2020:5417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:5417
21
reference_url https://access.redhat.com/errata/RHSA-2021:0949
reference_id RHSA-2021:0949
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0949
22
reference_url https://usn.ubuntu.com/4402-1/
reference_id USN-4402-1
reference_type
scores
url https://usn.ubuntu.com/4402-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8177
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h6xj-mys4-pucf
50
url VCID-hhu3-dp3m-gbgm
vulnerability_id VCID-hhu3-dp3m-gbgm
summary Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
reference_id
reference_type
scores
0
value 0.03181
scoring_system epss
scoring_elements 0.872
published_at 2026-06-04T12:55:00Z
1
value 0.03181
scoring_system epss
scoring_elements 0.87223
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
2
reference_url https://curl.se/docs/CVE-2013-2174.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-2174.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=965640
reference_id 965640
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=965640
5
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
6
reference_url https://access.redhat.com/errata/RHSA-2013:0983
reference_id RHSA-2013:0983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0983
7
reference_url https://usn.ubuntu.com/1894-1/
reference_id USN-1894-1
reference_type
scores
url https://usn.ubuntu.com/1894-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-2174
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu3-dp3m-gbgm
51
url VCID-j688-cyfg-p7gu
vulnerability_id VCID-j688-cyfg-p7gu
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22576
reference_id
reference_type
scores
0
value 0.00348
scoring_system epss
scoring_elements 0.57608
published_at 2026-06-04T12:55:00Z
1
value 0.00348
scoring_system epss
scoring_elements 0.5766
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22576
2
reference_url https://curl.se/docs/CVE-2022-22576.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-22576.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1526328
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://hackerone.com/reports/1526328
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010295
reference_id 1010295
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010295
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2077541
reference_id 2077541
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2077541
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2026-04-16T14:05:38Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-22576
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j688-cyfg-p7gu
52
url VCID-jnq1-hk6d-b3a3
vulnerability_id VCID-jnq1-hk6d-b3a3
summary When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2398.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2398.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-2398
reference_id
reference_type
scores
0
value 0.02015
scoring_system epss
scoring_elements 0.84075
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-2398
2
reference_url https://curl.se/docs/CVE-2024-2398.html
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://curl.se/docs/CVE-2024-2398.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2402845
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://hackerone.com/reports/2402845
6
reference_url http://seclists.org/fulldisclosure/2024/Jul/18
reference_id 18
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/18
7
reference_url http://seclists.org/fulldisclosure/2024/Jul/19
reference_id 19
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/19
8
reference_url http://seclists.org/fulldisclosure/2024/Jul/20
reference_id 20
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://seclists.org/fulldisclosure/2024/Jul/20
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2270498
reference_id 2270498
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2270498
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
reference_id 2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
11
reference_url http://www.openwall.com/lists/oss-security/2024/03/27/3
reference_id 3
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url http://www.openwall.com/lists/oss-security/2024/03/27/3
12
reference_url https://curl.se/docs/CVE-2024-2398.json
reference_id CVE-2024-2398.json
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://curl.se/docs/CVE-2024-2398.json
13
reference_url https://security.gentoo.org/glsa/202409-20
reference_id GLSA-202409-20
reference_type
scores
url https://security.gentoo.org/glsa/202409-20
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
reference_id GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
15
reference_url https://support.apple.com/kb/HT214118
reference_id HT214118
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214118
16
reference_url https://support.apple.com/kb/HT214119
reference_id HT214119
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214119
17
reference_url https://support.apple.com/kb/HT214120
reference_id HT214120
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://support.apple.com/kb/HT214120
18
reference_url https://security.netapp.com/advisory/ntap-20240503-0009/
reference_id ntap-20240503-0009
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-26T18:57:39Z/
url https://security.netapp.com/advisory/ntap-20240503-0009/
19
reference_url https://access.redhat.com/errata/RHSA-2024:10135
reference_id RHSA-2024:10135
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10135
20
reference_url https://access.redhat.com/errata/RHSA-2024:11109
reference_id RHSA-2024:11109
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:11109
21
reference_url https://access.redhat.com/errata/RHSA-2024:2693
reference_id RHSA-2024:2693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2693
22
reference_url https://access.redhat.com/errata/RHSA-2024:2694
reference_id RHSA-2024:2694
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2694
23
reference_url https://access.redhat.com/errata/RHSA-2024:3998
reference_id RHSA-2024:3998
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3998
24
reference_url https://access.redhat.com/errata/RHSA-2024:5529
reference_id RHSA-2024:5529
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5529
25
reference_url https://access.redhat.com/errata/RHSA-2024:5654
reference_id RHSA-2024:5654
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5654
26
reference_url https://access.redhat.com/errata/RHSA-2024:7213
reference_id RHSA-2024:7213
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7213
27
reference_url https://access.redhat.com/errata/RHSA-2024:7374
reference_id RHSA-2024:7374
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7374
28
reference_url https://usn.ubuntu.com/6718-1/
reference_id USN-6718-1
reference_type
scores
url https://usn.ubuntu.com/6718-1/
29
reference_url https://usn.ubuntu.com/6718-2/
reference_id USN-6718-2
reference_type
scores
url https://usn.ubuntu.com/6718-2/
30
reference_url https://usn.ubuntu.com/6718-3/
reference_id USN-6718-3
reference_type
scores
url https://usn.ubuntu.com/6718-3/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2024-2398
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jnq1-hk6d-b3a3
53
url VCID-k79t-tesa-jfck
vulnerability_id VCID-k79t-tesa-jfck
summary In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate). libcurl supports by default the use of TLS session id/ticket to resume previous TLS sessions to speed up subsequent TLS handshakes. They are used when for any reason an existing TLS connection couldn't be kept alive to make the next handshake faster. This flaw is a regression and identical to CVE-2016-5419 reported on August 3rd 2016, but affecting a different version range.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7468.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7468
reference_id
reference_type
scores
0
value 0.00347
scoring_system epss
scoring_elements 0.57534
published_at 2026-06-04T12:55:00Z
1
value 0.00347
scoring_system epss
scoring_elements 0.57586
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7468
2
reference_url https://curl.se/docs/CVE-2017-7468.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-7468.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7468
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1443381
reference_id 1443381
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1443381
6
reference_url https://security.archlinux.org/ASA-201704-12
reference_id ASA-201704-12
reference_type
scores
url https://security.archlinux.org/ASA-201704-12
7
reference_url https://security.archlinux.org/AVG-180
reference_id AVG-180
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-180
8
reference_url https://security.archlinux.org/AVG-181
reference_id AVG-181
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-181
9
reference_url https://security.archlinux.org/AVG-183
reference_id AVG-183
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-183
10
reference_url https://security.archlinux.org/AVG-184
reference_id AVG-184
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-184
11
reference_url https://security.archlinux.org/AVG-241
reference_id AVG-241
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-241
12
reference_url https://security.archlinux.org/AVG-243
reference_id AVG-243
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-243
13
reference_url https://security.gentoo.org/glsa/201709-14
reference_id GLSA-201709-14
reference_type
scores
url https://security.gentoo.org/glsa/201709-14
14
reference_url https://usn.ubuntu.com/3262-1/
reference_id USN-3262-1
reference_type
scores
url https://usn.ubuntu.com/3262-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2017-7468
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k79t-tesa-jfck
54
url VCID-kae8-wmf2-2kf1
vulnerability_id VCID-kae8-wmf2-2kf1
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000300.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000300
reference_id
reference_type
scores
0
value 0.00926
scoring_system epss
scoring_elements 0.76446
published_at 2026-06-05T12:55:00Z
1
value 0.00926
scoring_system epss
scoring_elements 0.76419
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000300
2
reference_url https://curl.se/docs/CVE-2018-1000300.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000300.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1575533
reference_id 1575533
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1575533
5
reference_url https://security.archlinux.org/ASA-201805-13
reference_id ASA-201805-13
reference_type
scores
url https://security.archlinux.org/ASA-201805-13
6
reference_url https://security.archlinux.org/ASA-201805-14
reference_id ASA-201805-14
reference_type
scores
url https://security.archlinux.org/ASA-201805-14
7
reference_url https://security.archlinux.org/ASA-201805-15
reference_id ASA-201805-15
reference_type
scores
url https://security.archlinux.org/ASA-201805-15
8
reference_url https://security.archlinux.org/ASA-201805-16
reference_id ASA-201805-16
reference_type
scores
url https://security.archlinux.org/ASA-201805-16
9
reference_url https://security.archlinux.org/ASA-201805-17
reference_id ASA-201805-17
reference_type
scores
url https://security.archlinux.org/ASA-201805-17
10
reference_url https://security.archlinux.org/ASA-201805-18
reference_id ASA-201805-18
reference_type
scores
url https://security.archlinux.org/ASA-201805-18
11
reference_url https://security.archlinux.org/AVG-694
reference_id AVG-694
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-694
12
reference_url https://security.archlinux.org/AVG-695
reference_id AVG-695
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-695
13
reference_url https://security.archlinux.org/AVG-696
reference_id AVG-696
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-696
14
reference_url https://security.archlinux.org/AVG-697
reference_id AVG-697
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-697
15
reference_url https://security.archlinux.org/AVG-698
reference_id AVG-698
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-698
16
reference_url https://security.archlinux.org/AVG-699
reference_id AVG-699
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-699
17
reference_url https://security.gentoo.org/glsa/201806-05
reference_id GLSA-201806-05
reference_type
scores
url https://security.gentoo.org/glsa/201806-05
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000300
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kae8-wmf2-2kf1
55
url VCID-kkrm-dj79-4ucj
vulnerability_id VCID-kkrm-dj79-4ucj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
reference_id
reference_type
scores
0
value 0.00682
scoring_system epss
scoring_elements 0.72057
published_at 2026-06-05T12:55:00Z
1
value 0.00682
scoring_system epss
scoring_elements 0.72016
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27776
2
reference_url https://curl.se/docs/CVE-2022-27776.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27776.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1547048
reference_id
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://hackerone.com/reports/1547048
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
reference_id 1010252
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010252
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
reference_id 2078408
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2078408
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
reference_id 7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
23
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
reference_id DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
28
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-20T15:23:04Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
29
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
30
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
31
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-27776
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kkrm-dj79-4ucj
56
url VCID-kn6z-caj8-bbc9
vulnerability_id VCID-kn6z-caj8-bbc9
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22890.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22890
reference_id
reference_type
scores
0
value 0.00069
scoring_system epss
scoring_elements 0.21312
published_at 2026-06-04T12:55:00Z
1
value 0.00069
scoring_system epss
scoring_elements 0.21392
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22890
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1129529
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://hackerone.com/reports/1129529
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1941965
reference_id 1941965
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1941965
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
reference_id 2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986270
reference_id 986270
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986270
15
reference_url https://security.archlinux.org/AVG-1753
reference_id AVG-1753
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1753
16
reference_url https://security.archlinux.org/AVG-1754
reference_id AVG-1754
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1754
17
reference_url https://security.archlinux.org/AVG-1755
reference_id AVG-1755
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1755
18
reference_url https://security.archlinux.org/AVG-1756
reference_id AVG-1756
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1756
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22890
reference_id CVE-2021-22890
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22890
20
reference_url https://curl.se/docs/CVE-2021-22890.html
reference_id CVE-2021-22890.HTML
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://curl.se/docs/CVE-2021-22890.html
21
reference_url https://security.gentoo.org/glsa/202105-36
reference_id GLSA-202105-36
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://security.gentoo.org/glsa/202105-36
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
reference_id ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/
23
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
reference_id KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/
24
reference_url https://security.netapp.com/advisory/ntap-20210521-0007/
reference_id ntap-20210521-0007
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-09T15:11:48Z/
url https://security.netapp.com/advisory/ntap-20210521-0007/
25
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
26
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
27
reference_url https://usn.ubuntu.com/4898-1/
reference_id USN-4898-1
reference_type
scores
url https://usn.ubuntu.com/4898-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22890
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kn6z-caj8-bbc9
57
url VCID-kq38-7s5x-nqaz
vulnerability_id VCID-kq38-7s5x-nqaz
summary libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-7264.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-7264.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-7264
reference_id
reference_type
scores
0
value 0.00796
scoring_system epss
scoring_elements 0.74375
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-7264
2
reference_url https://curl.se/docs/CVE-2024-7264.html
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://curl.se/docs/CVE-2024-7264.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2629968
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://hackerone.com/reports/2629968
6
reference_url http://www.openwall.com/lists/oss-security/2024/07/31/1
reference_id 1
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url http://www.openwall.com/lists/oss-security/2024/07/31/1
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077656
reference_id 1077656
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077656
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2301888
reference_id 2301888
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2301888
9
reference_url https://curl.se/docs/CVE-2024-7264.json
reference_id CVE-2024-7264.json
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:05:41Z/
url https://curl.se/docs/CVE-2024-7264.json
10
reference_url https://access.redhat.com/errata/RHSA-2024:7726
reference_id RHSA-2024:7726
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:7726
11
reference_url https://access.redhat.com/errata/RHSA-2025:1671
reference_id RHSA-2025:1671
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1671
12
reference_url https://access.redhat.com/errata/RHSA-2025:1673
reference_id RHSA-2025:1673
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1673
13
reference_url https://usn.ubuntu.com/6944-1/
reference_id USN-6944-1
reference_type
scores
url https://usn.ubuntu.com/6944-1/
14
reference_url https://usn.ubuntu.com/6944-2/
reference_id USN-6944-2
reference_type
scores
url https://usn.ubuntu.com/6944-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2024-7264
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kq38-7s5x-nqaz
58
url VCID-mh96-gkf1-9uek
vulnerability_id VCID-mh96-gkf1-9uek
summary curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000101.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000101
reference_id
reference_type
scores
0
value 0.00655
scoring_system epss
scoring_elements 0.7133
published_at 2026-06-04T12:55:00Z
1
value 0.00655
scoring_system epss
scoring_elements 0.71375
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000101
2
reference_url https://curl.se/docs/CVE-2017-1000101.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-1000101.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/100249
reference_id 100249
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url http://www.securityfocus.com/bid/100249
8
reference_url http://www.securitytracker.com/id/1039117
reference_id 1039117
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url http://www.securitytracker.com/id/1039117
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1478309
reference_id 1478309
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1478309
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871554
reference_id 871554
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871554
11
reference_url https://curl.haxx.se/docs/adv_20170809A.html
reference_id adv_20170809A.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url https://curl.haxx.se/docs/adv_20170809A.html
12
reference_url https://security.archlinux.org/ASA-201708-16
reference_id ASA-201708-16
reference_type
scores
url https://security.archlinux.org/ASA-201708-16
13
reference_url https://security.archlinux.org/AVG-370
reference_id AVG-370
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-370
14
reference_url http://www.debian.org/security/2017/dsa-3992
reference_id dsa-3992
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url http://www.debian.org/security/2017/dsa-3992
15
reference_url https://security.gentoo.org/glsa/201709-14
reference_id GLSA-201709-14
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url https://security.gentoo.org/glsa/201709-14
16
reference_url https://support.apple.com/HT208221
reference_id HT208221
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:45:32Z/
url https://support.apple.com/HT208221
17
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-1000101
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mh96-gkf1-9uek
59
url VCID-mq44-5pmp-2qhh
vulnerability_id VCID-mq44-5pmp-2qhh
summary Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5421.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-5421
reference_id
reference_type
scores
0
value 0.01092
scoring_system epss
scoring_elements 0.78294
published_at 2026-06-04T12:55:00Z
1
value 0.01092
scoring_system epss
scoring_elements 0.7832
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-5421
2
reference_url https://curl.se/docs/CVE-2016-5421.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-5421.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1362199
reference_id 1362199
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1362199
8
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
9
reference_url https://usn.ubuntu.com/3048-1/
reference_id USN-3048-1
reference_type
scores
url https://usn.ubuntu.com/3048-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-5421
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mq44-5pmp-2qhh
60
url VCID-msd2-35g9-nyd2
vulnerability_id VCID-msd2-35g9-nyd2
summary A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8284.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24369
published_at 2026-06-05T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24269
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8284
2
reference_url https://curl.se/docs/CVE-2020-8284.html
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Low
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://curl.se/docs/CVE-2020-8284.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://hackerone.com/reports/1040166
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://hackerone.com/reports/1040166
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
reference_id 1902667
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1902667
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
reference_id 977163
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977163
15
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
17
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://www.debian.org/security/2021/dsa-4881
18
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.gentoo.org/glsa/202012-14
19
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212325
20
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212326
21
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://support.apple.com/kb/HT212327
22
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
23
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:56:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
25
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
26
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
27
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
28
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
29
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8284
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-msd2-35g9-nyd2
61
url VCID-naac-snjw-qbad
vulnerability_id VCID-naac-snjw-qbad
summary libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000254.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000254
reference_id
reference_type
scores
0
value 0.01318
scoring_system epss
scoring_elements 0.80206
published_at 2026-06-04T12:55:00Z
1
value 0.01318
scoring_system epss
scoring_elements 0.8023
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000254
2
reference_url https://curl.se/docs/CVE-2017-1000254.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-1000254.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:N/A:P
1
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1495541
reference_id 1495541
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1495541
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671
reference_id 877671
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877671
9
reference_url https://security.archlinux.org/ASA-201710-2
reference_id ASA-201710-2
reference_type
scores
url https://security.archlinux.org/ASA-201710-2
10
reference_url https://security.archlinux.org/ASA-201710-3
reference_id ASA-201710-3
reference_type
scores
url https://security.archlinux.org/ASA-201710-3
11
reference_url https://security.archlinux.org/ASA-201710-4
reference_id ASA-201710-4
reference_type
scores
url https://security.archlinux.org/ASA-201710-4
12
reference_url https://security.archlinux.org/ASA-201710-5
reference_id ASA-201710-5
reference_type
scores
url https://security.archlinux.org/ASA-201710-5
13
reference_url https://security.archlinux.org/ASA-201710-6
reference_id ASA-201710-6
reference_type
scores
url https://security.archlinux.org/ASA-201710-6
14
reference_url https://security.archlinux.org/ASA-201710-7
reference_id ASA-201710-7
reference_type
scores
url https://security.archlinux.org/ASA-201710-7
15
reference_url https://security.archlinux.org/AVG-371
reference_id AVG-371
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-371
16
reference_url https://security.archlinux.org/AVG-386
reference_id AVG-386
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-386
17
reference_url https://security.archlinux.org/AVG-387
reference_id AVG-387
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-387
18
reference_url https://security.archlinux.org/AVG-388
reference_id AVG-388
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-388
19
reference_url https://security.archlinux.org/AVG-389
reference_id AVG-389
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-389
20
reference_url https://security.archlinux.org/AVG-422
reference_id AVG-422
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-422
21
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
url https://security.gentoo.org/glsa/201712-04
22
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
23
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-1000254
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-naac-snjw-qbad
62
url VCID-nkmd-xb13-mbg9
vulnerability_id VCID-nkmd-xb13-mbg9
summary cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4545
reference_id
reference_type
scores
0
value 0.00358
scoring_system epss
scoring_elements 0.58306
published_at 2026-06-04T12:55:00Z
1
value 0.00358
scoring_system epss
scoring_elements 0.58353
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4545
2
reference_url https://curl.se/docs/CVE-2013-4545.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-4545.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1029159
reference_id 1029159
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1029159
5
reference_url https://usn.ubuntu.com/2048-1/
reference_id USN-2048-1
reference_type
scores
url https://usn.ubuntu.com/2048-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-4545
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nkmd-xb13-mbg9
63
url VCID-p7mn-a632-c3ag
vulnerability_id VCID-p7mn-a632-c3ag
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0500.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-0500
reference_id
reference_type
scores
0
value 0.01242
scoring_system epss
scoring_elements 0.79627
published_at 2026-06-05T12:55:00Z
1
value 0.01242
scoring_system epss
scoring_elements 0.796
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-0500
2
reference_url https://curl.se/docs/CVE-2018-0500.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-0500.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0500
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0500
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1597101
reference_id 1597101
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1597101
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903546
reference_id 903546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903546
7
reference_url https://security.archlinux.org/ASA-201807-10
reference_id ASA-201807-10
reference_type
scores
url https://security.archlinux.org/ASA-201807-10
8
reference_url https://security.archlinux.org/ASA-201807-5
reference_id ASA-201807-5
reference_type
scores
url https://security.archlinux.org/ASA-201807-5
9
reference_url https://security.archlinux.org/ASA-201807-6
reference_id ASA-201807-6
reference_type
scores
url https://security.archlinux.org/ASA-201807-6
10
reference_url https://security.archlinux.org/ASA-201807-7
reference_id ASA-201807-7
reference_type
scores
url https://security.archlinux.org/ASA-201807-7
11
reference_url https://security.archlinux.org/ASA-201807-8
reference_id ASA-201807-8
reference_type
scores
url https://security.archlinux.org/ASA-201807-8
12
reference_url https://security.archlinux.org/ASA-201807-9
reference_id ASA-201807-9
reference_type
scores
url https://security.archlinux.org/ASA-201807-9
13
reference_url https://security.archlinux.org/AVG-729
reference_id AVG-729
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-729
14
reference_url https://security.archlinux.org/AVG-730
reference_id AVG-730
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-730
15
reference_url https://security.archlinux.org/AVG-731
reference_id AVG-731
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-731
16
reference_url https://security.archlinux.org/AVG-732
reference_id AVG-732
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-732
17
reference_url https://security.archlinux.org/AVG-733
reference_id AVG-733
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-733
18
reference_url https://security.archlinux.org/AVG-734
reference_id AVG-734
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-734
19
reference_url https://security.gentoo.org/glsa/201807-04
reference_id GLSA-201807-04
reference_type
scores
url https://security.gentoo.org/glsa/201807-04
20
reference_url https://usn.ubuntu.com/3710-1/
reference_id USN-3710-1
reference_type
scores
url https://usn.ubuntu.com/3710-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-0500
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7mn-a632-c3ag
64
url VCID-p8vk-yf66-wbb7
vulnerability_id VCID-p8vk-yf66-wbb7
summary A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000121.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
reference_id
reference_type
scores
0
value 0.02668
scoring_system epss
scoring_elements 0.86088
published_at 2026-06-04T12:55:00Z
1
value 0.02668
scoring_system epss
scoring_elements 0.86109
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000121
2
reference_url https://curl.se/docs/CVE-2018-1000121.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000121.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
reference_id 1552631
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552631
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
9
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
10
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
11
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
12
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
13
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
14
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
15
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
16
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
17
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
18
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
19
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
20
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
21
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000121
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p8vk-yf66-wbb7
65
url VCID-p97a-kjpp-f3d8
vulnerability_id VCID-p97a-kjpp-f3d8
summary A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27534.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27534.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27534
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.2016
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27534
2
reference_url https://curl.se/docs/CVE-2023-27534.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-27534.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27534
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1892351
reference_id
reference_type
scores
url https://hackerone.com/reports/1892351
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179069
reference_id 2179069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179069
7
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
8
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
9
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
10
reference_url https://access.redhat.com/errata/RHSA-2023:6679
reference_id RHSA-2023:6679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6679
11
reference_url https://usn.ubuntu.com/5964-1/
reference_id USN-5964-1
reference_type
scores
url https://usn.ubuntu.com/5964-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-27534
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p97a-kjpp-f3d8
66
url VCID-p9v4-nweu-vydg
vulnerability_id VCID-p9v4-nweu-vydg
summary cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
reference_id
reference_type
scores
0
value 0.01422
scoring_system epss
scoring_elements 0.80941
published_at 2026-06-04T12:55:00Z
1
value 0.01422
scoring_system epss
scoring_elements 0.8097
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
2
reference_url https://curl.se/docs/CVE-2015-3148.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3148.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
reference_id 1213351
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3148
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p9v4-nweu-vydg
67
url VCID-q46r-7nct-s3bw
vulnerability_id VCID-q46r-7nct-s3bw
summary 
Out-of-bounds Write
curl is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8285.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8285.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8285
reference_id
reference_type
scores
0
value 0.00742
scoring_system epss
scoring_elements 0.73378
published_at 2026-06-05T12:55:00Z
1
value 0.00742
scoring_system epss
scoring_elements 0.73342
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8285
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8177
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8231
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8284
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8285
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8286
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22876
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22890
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://hackerone.com/reports/1045844
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://hackerone.com/reports/1045844
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1902687
reference_id 1902687
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1902687
13
reference_url http://seclists.org/fulldisclosure/2021/Apr/51
reference_id 51
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url http://seclists.org/fulldisclosure/2021/Apr/51
14
reference_url https://github.com/curl/curl/issues/6255
reference_id 6255
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://github.com/curl/curl/issues/6255
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977162
reference_id 977162
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977162
16
reference_url https://security.archlinux.org/AVG-1337
reference_id AVG-1337
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1337
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8285
reference_id CVE-2020-8285
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-8285
18
reference_url https://curl.se/docs/CVE-2020-8285.html
reference_id CVE-2020-8285.HTML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://curl.se/docs/CVE-2020-8285.html
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
reference_id DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/
20
reference_url https://www.debian.org/security/2021/dsa-4881
reference_id dsa-4881
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://www.debian.org/security/2021/dsa-4881
21
reference_url https://security.gentoo.org/glsa/202012-14
reference_id GLSA-202012-14
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://security.gentoo.org/glsa/202012-14
22
reference_url https://support.apple.com/kb/HT212325
reference_id HT212325
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212325
23
reference_url https://support.apple.com/kb/HT212326
reference_id HT212326
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212326
24
reference_url https://support.apple.com/kb/HT212327
reference_id HT212327
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://support.apple.com/kb/HT212327
25
reference_url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
reference_id msg00029.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html
26
reference_url https://security.netapp.com/advisory/ntap-20210122-0007/
reference_id ntap-20210122-0007
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://security.netapp.com/advisory/ntap-20210122-0007/
27
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
reference_id NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/
28
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
29
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:06:58Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
30
reference_url https://access.redhat.com/errata/RHSA-2021:1610
reference_id RHSA-2021:1610
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1610
31
reference_url https://access.redhat.com/errata/RHSA-2021:2471
reference_id RHSA-2021:2471
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2471
32
reference_url https://access.redhat.com/errata/RHSA-2021:2472
reference_id RHSA-2021:2472
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2472
33
reference_url https://usn.ubuntu.com/4665-1/
reference_id USN-4665-1
reference_type
scores
url https://usn.ubuntu.com/4665-1/
34
reference_url https://usn.ubuntu.com/4665-2/
reference_id USN-4665-2
reference_type
scores
url https://usn.ubuntu.com/4665-2/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
1
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-8285
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q46r-7nct-s3bw
68
url VCID-q8ja-keyk-fyfb
vulnerability_id VCID-q8ja-keyk-fyfb
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8625.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8625
reference_id
reference_type
scores
0
value 0.01671
scoring_system epss
scoring_elements 0.82492
published_at 2026-06-05T12:55:00Z
1
value 0.01671
scoring_system epss
scoring_elements 0.82463
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8625
2
reference_url https://curl.se/docs/CVE-2016-8625.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8625.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8625
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388392
reference_id 1388392
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388392
6
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
7
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
8
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
9
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
10
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
11
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
12
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
13
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
14
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
15
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
16
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
17
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
18
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8625
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q8ja-keyk-fyfb
69
url VCID-q8tg-prj1-y7b8
vulnerability_id VCID-q8tg-prj1-y7b8
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22946.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22946.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22946
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19785
published_at 2026-06-05T12:55:00Z
1
value 0.00063
scoring_system epss
scoring_elements 0.1971
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22946
2
reference_url https://curl.se/docs/CVE-2021-22946.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22946.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1334111
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://hackerone.com/reports/1334111
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017589
reference_id 1017589
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017589
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2003175
reference_id 2003175
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2003175
22
reference_url http://seclists.org/fulldisclosure/2022/Mar/29
reference_id 29
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url http://seclists.org/fulldisclosure/2022/Mar/29
23
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
reference_id APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/
24
reference_url https://security.archlinux.org/AVG-2384
reference_id AVG-2384
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2384
25
reference_url https://security.archlinux.org/AVG-2385
reference_id AVG-2385
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2385
26
reference_url https://security.archlinux.org/AVG-2386
reference_id AVG-2386
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2386
27
reference_url https://security.archlinux.org/AVG-2387
reference_id AVG-2387
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2387
28
reference_url https://security.archlinux.org/AVG-2388
reference_id AVG-2388
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2388
29
reference_url https://security.archlinux.org/AVG-2389
reference_id AVG-2389
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2389
30
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://www.debian.org/security/2022/dsa-5197
31
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.gentoo.org/glsa/202212-01
32
reference_url https://support.apple.com/kb/HT213183
reference_id HT213183
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://support.apple.com/kb/HT213183
33
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
34
reference_url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html
35
reference_url https://security.netapp.com/advisory/ntap-20211029-0003/
reference_id ntap-20211029-0003
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.netapp.com/advisory/ntap-20211029-0003/
36
reference_url https://security.netapp.com/advisory/ntap-20220121-0008/
reference_id ntap-20220121-0008
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://security.netapp.com/advisory/ntap-20220121-0008/
37
reference_url https://access.redhat.com/errata/RHSA-2021:4059
reference_id RHSA-2021:4059
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4059
38
reference_url https://access.redhat.com/errata/RHSA-2022:0635
reference_id RHSA-2022:0635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:0635
39
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
40
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
reference_id RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:53:35Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/
41
reference_url https://usn.ubuntu.com/5079-1/
reference_id USN-5079-1
reference_type
scores
url https://usn.ubuntu.com/5079-1/
42
reference_url https://usn.ubuntu.com/5079-2/
reference_id USN-5079-2
reference_type
scores
url https://usn.ubuntu.com/5079-2/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22946
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q8tg-prj1-y7b8
70
url VCID-q9ht-ra39-kuef
vulnerability_id VCID-q9ht-ra39-kuef
summary The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
reference_id
reference_type
scores
0
value 0.00666
scoring_system epss
scoring_elements 0.7168
published_at 2026-06-05T12:55:00Z
1
value 0.00903
scoring_system epss
scoring_elements 0.76091
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
2
reference_url https://curl.se/docs/CVE-2014-0138.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0138.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
reference_id 1079148
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
9
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0138
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9ht-ra39-kuef
71
url VCID-qe9z-wuze-tucq
vulnerability_id VCID-qe9z-wuze-tucq
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8616.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8616
reference_id
reference_type
scores
0
value 0.04507
scoring_system epss
scoring_elements 0.89342
published_at 2026-06-05T12:55:00Z
1
value 0.04507
scoring_system epss
scoring_elements 0.89324
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8616
2
reference_url https://curl.se/docs/CVE-2016-8616.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8616.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388371
reference_id 1388371
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388371
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
20
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
21
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
22
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
23
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
24
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
25
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
26
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
27
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
28
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8616
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qe9z-wuze-tucq
72
url VCID-qrnc-7ywu-37cz
vulnerability_id VCID-qrnc-7ywu-37cz
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3822.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3822
reference_id
reference_type
scores
0
value 0.18518
scoring_system epss
scoring_elements 0.95379
published_at 2026-06-05T12:55:00Z
1
value 0.18518
scoring_system epss
scoring_elements 0.95371
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3822
2
reference_url https://curl.se/docs/CVE-2019-3822.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-3822.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16890
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3822
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3823
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url http://www.securityfocus.com/bid/106950
reference_id 106950
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url http://www.securityfocus.com/bid/106950
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670254
reference_id 1670254
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670254
9
reference_url https://usn.ubuntu.com/3882-1/
reference_id 3882-1
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://usn.ubuntu.com/3882-1/
10
reference_url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_id 8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
11
reference_url https://security.archlinux.org/ASA-201902-10
reference_id ASA-201902-10
reference_type
scores
url https://security.archlinux.org/ASA-201902-10
12
reference_url https://security.archlinux.org/ASA-201902-11
reference_id ASA-201902-11
reference_type
scores
url https://security.archlinux.org/ASA-201902-11
13
reference_url https://security.archlinux.org/ASA-201902-12
reference_id ASA-201902-12
reference_type
scores
url https://security.archlinux.org/ASA-201902-12
14
reference_url https://security.archlinux.org/ASA-201902-13
reference_id ASA-201902-13
reference_type
scores
url https://security.archlinux.org/ASA-201902-13
15
reference_url https://security.archlinux.org/ASA-201902-9
reference_id ASA-201902-9
reference_type
scores
url https://security.archlinux.org/ASA-201902-9
16
reference_url https://security.archlinux.org/AVG-873
reference_id AVG-873
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-873
17
reference_url https://security.archlinux.org/AVG-874
reference_id AVG-874
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-874
18
reference_url https://security.archlinux.org/AVG-875
reference_id AVG-875
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-875
19
reference_url https://security.archlinux.org/AVG-876
reference_id AVG-876
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-876
20
reference_url https://security.archlinux.org/AVG-877
reference_id AVG-877
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-877
21
reference_url https://curl.haxx.se/docs/CVE-2019-3822.html
reference_id CVE-2019-3822.html
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://curl.haxx.se/docs/CVE-2019-3822.html
22
reference_url https://www.debian.org/security/2019/dsa-4386
reference_id dsa-4386
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://www.debian.org/security/2019/dsa-4386
23
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.gentoo.org/glsa/201903-03
24
reference_url https://support.f5.com/csp/article/K84141449
reference_id K84141449
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://support.f5.com/csp/article/K84141449
25
reference_url https://support.f5.com/csp/article/K84141449?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K84141449?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://support.f5.com/csp/article/K84141449?utm_source=f5support&amp%3Butm_medium=RSS
26
reference_url https://security.netapp.com/advisory/ntap-20190315-0001/
reference_id ntap-20190315-0001
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.netapp.com/advisory/ntap-20190315-0001/
27
reference_url https://security.netapp.com/advisory/ntap-20190719-0004/
reference_id ntap-20190719-0004
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://security.netapp.com/advisory/ntap-20190719-0004/
28
reference_url https://access.redhat.com/errata/RHSA-2019:3701
reference_id RHSA-2019:3701
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://access.redhat.com/errata/RHSA-2019:3701
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822
reference_id show_bug.cgi?id=CVE-2019-3822
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822
30
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
reference_id ssa-436177.pdf
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:52:41Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2019-3822
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qrnc-7ywu-37cz
73
url VCID-r2g9-c896-rkge
vulnerability_id VCID-r2g9-c896-rkge
summary A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-43552.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-43552.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-43552
reference_id
reference_type
scores
0
value 0.00104
scoring_system epss
scoring_elements 0.27848
published_at 2026-06-04T12:55:00Z
1
value 0.00104
scoring_system epss
scoring_elements 0.27915
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-43552
2
reference_url https://curl.se/docs/CVE-2022-43552.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-43552.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43552
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/1764858
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://hackerone.com/reports/1764858
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026830
reference_id 1026830
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1026830
8
reference_url http://seclists.org/fulldisclosure/2023/Mar/17
reference_id 17
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url http://seclists.org/fulldisclosure/2023/Mar/17
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2152652
reference_id 2152652
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2152652
10
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://security.gentoo.org/glsa/202310-12
11
reference_url https://support.apple.com/kb/HT213670
reference_id HT213670
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://support.apple.com/kb/HT213670
12
reference_url https://security.netapp.com/advisory/ntap-20230214-0002/
reference_id ntap-20230214-0002
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-24T14:27:40Z/
url https://security.netapp.com/advisory/ntap-20230214-0002/
13
reference_url https://access.redhat.com/errata/RHSA-2023:2478
reference_id RHSA-2023:2478
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2478
14
reference_url https://access.redhat.com/errata/RHSA-2023:2963
reference_id RHSA-2023:2963
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2963
15
reference_url https://access.redhat.com/errata/RHSA-2023:3354
reference_id RHSA-2023:3354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3354
16
reference_url https://access.redhat.com/errata/RHSA-2023:3355
reference_id RHSA-2023:3355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3355
17
reference_url https://access.redhat.com/errata/RHSA-2023:7743
reference_id RHSA-2023:7743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7743
18
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
19
reference_url https://usn.ubuntu.com/5788-1/
reference_id USN-5788-1
reference_type
scores
url https://usn.ubuntu.com/5788-1/
20
reference_url https://usn.ubuntu.com/5894-1/
reference_id USN-5894-1
reference_type
scores
url https://usn.ubuntu.com/5894-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-43552
risk_score 2.6
exploitability 0.5
weighted_severity 5.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r2g9-c896-rkge
74
url VCID-raxd-4nxj-gkhp
vulnerability_id VCID-raxd-4nxj-gkhp
summary libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000005.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000005
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58816
published_at 2026-06-04T12:55:00Z
1
value 0.00365
scoring_system epss
scoring_elements 0.58862
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000005
2
reference_url https://curl.se/docs/CVE-2018-1000005.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000005.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000005
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000005
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1536013
reference_id 1536013
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1536013
5
reference_url https://security.archlinux.org/ASA-201801-20
reference_id ASA-201801-20
reference_type
scores
url https://security.archlinux.org/ASA-201801-20
6
reference_url https://security.archlinux.org/ASA-201801-22
reference_id ASA-201801-22
reference_type
scores
url https://security.archlinux.org/ASA-201801-22
7
reference_url https://security.archlinux.org/ASA-201801-23
reference_id ASA-201801-23
reference_type
scores
url https://security.archlinux.org/ASA-201801-23
8
reference_url https://security.archlinux.org/ASA-201801-24
reference_id ASA-201801-24
reference_type
scores
url https://security.archlinux.org/ASA-201801-24
9
reference_url https://security.archlinux.org/ASA-201801-25
reference_id ASA-201801-25
reference_type
scores
url https://security.archlinux.org/ASA-201801-25
10
reference_url https://security.archlinux.org/ASA-201801-26
reference_id ASA-201801-26
reference_type
scores
url https://security.archlinux.org/ASA-201801-26
11
reference_url https://security.archlinux.org/AVG-593
reference_id AVG-593
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-593
12
reference_url https://security.archlinux.org/AVG-594
reference_id AVG-594
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-594
13
reference_url https://security.archlinux.org/AVG-595
reference_id AVG-595
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-595
14
reference_url https://security.archlinux.org/AVG-596
reference_id AVG-596
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-596
15
reference_url https://security.archlinux.org/AVG-597
reference_id AVG-597
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-597
16
reference_url https://security.archlinux.org/AVG-598
reference_id AVG-598
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-598
17
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
18
reference_url https://usn.ubuntu.com/3554-1/
reference_id USN-3554-1
reference_type
scores
url https://usn.ubuntu.com/3554-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000005
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-raxd-4nxj-gkhp
75
url VCID-razg-yr7y-ukgd
vulnerability_id VCID-razg-yr7y-ukgd
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38545.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38545.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38545
reference_id
reference_type
scores
0
value 0.26747
scoring_system epss
scoring_elements 0.96449
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38545
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2187833
reference_id
reference_type
scores
url https://hackerone.com/reports/2187833
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2241933
reference_id 2241933
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2241933
7
reference_url http://seclists.org/fulldisclosure/2024/Jan/34
reference_id 34
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url http://seclists.org/fulldisclosure/2024/Jan/34
8
reference_url http://seclists.org/fulldisclosure/2024/Jan/37
reference_id 37
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url http://seclists.org/fulldisclosure/2024/Jan/37
9
reference_url http://seclists.org/fulldisclosure/2024/Jan/38
reference_id 38
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url http://seclists.org/fulldisclosure/2024/Jan/38
10
reference_url https://security.archlinux.org/AVG-2845
reference_id AVG-2845
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2845
11
reference_url https://security.archlinux.org/AVG-2846
reference_id AVG-2846
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2846
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38545
reference_id CVE-2023-38545
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-38545
13
reference_url https://curl.se/docs/CVE-2023-38545.html
reference_id CVE-2023-38545.HTML
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value High
scoring_system cvssv3.1
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://curl.se/docs/CVE-2023-38545.html
14
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
15
reference_url https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/
reference_id high-severity-heap-buffer-overflow-vulnerability
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/
16
reference_url https://support.apple.com/kb/HT214036
reference_id HT214036
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://support.apple.com/kb/HT214036
17
reference_url https://support.apple.com/kb/HT214057
reference_id HT214057
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://support.apple.com/kb/HT214057
18
reference_url https://support.apple.com/kb/HT214058
reference_id HT214058
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://support.apple.com/kb/HT214058
19
reference_url https://support.apple.com/kb/HT214063
reference_id HT214063
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://support.apple.com/kb/HT214063
20
reference_url https://security.netapp.com/advisory/ntap-20231027-0009/
reference_id ntap-20231027-0009
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://security.netapp.com/advisory/ntap-20231027-0009/
21
reference_url https://security.netapp.com/advisory/ntap-20240201-0005/
reference_id ntap-20240201-0005
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://security.netapp.com/advisory/ntap-20240201-0005/
22
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
reference_id OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
23
reference_url https://access.redhat.com/errata/RHSA-2023:5700
reference_id RHSA-2023:5700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5700
24
reference_url https://access.redhat.com/errata/RHSA-2023:5763
reference_id RHSA-2023:5763
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5763
25
reference_url https://access.redhat.com/errata/RHSA-2023:6745
reference_id RHSA-2023:6745
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6745
26
reference_url https://access.redhat.com/errata/RHSA-2023:7625
reference_id RHSA-2023:7625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7625
27
reference_url https://access.redhat.com/errata/RHSA-2023:7626
reference_id RHSA-2023:7626
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7626
28
reference_url https://access.redhat.com/errata/RHSA-2024:0797
reference_id RHSA-2024:0797
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0797
29
reference_url https://access.redhat.com/errata/RHSA-2024:2011
reference_id RHSA-2024:2011
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2011
30
reference_url https://usn.ubuntu.com/6429-1/
reference_id USN-6429-1
reference_type
scores
url https://usn.ubuntu.com/6429-1/
31
reference_url https://usn.ubuntu.com/6429-3/
reference_id USN-6429-3
reference_type
scores
url https://usn.ubuntu.com/6429-3/
32
reference_url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
reference_id viewtopic.php?f=8&t=8868
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-17T21:11:03Z/
url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-38545
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-razg-yr7y-ukgd
76
url VCID-rt5e-saz2-j7c9
vulnerability_id VCID-rt5e-saz2-j7c9
summary libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000007.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
reference_id
reference_type
scores
0
value 0.03854
scoring_system epss
scoring_elements 0.88416
published_at 2026-06-04T12:55:00Z
1
value 0.03854
scoring_system epss
scoring_elements 0.88434
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000007
2
reference_url https://curl.se/docs/CVE-2018-1000007.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-1000007.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
reference_id 1537125
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1537125
6
reference_url https://security.archlinux.org/ASA-201801-20
reference_id ASA-201801-20
reference_type
scores
url https://security.archlinux.org/ASA-201801-20
7
reference_url https://security.archlinux.org/ASA-201801-22
reference_id ASA-201801-22
reference_type
scores
url https://security.archlinux.org/ASA-201801-22
8
reference_url https://security.archlinux.org/ASA-201801-23
reference_id ASA-201801-23
reference_type
scores
url https://security.archlinux.org/ASA-201801-23
9
reference_url https://security.archlinux.org/ASA-201801-24
reference_id ASA-201801-24
reference_type
scores
url https://security.archlinux.org/ASA-201801-24
10
reference_url https://security.archlinux.org/ASA-201801-25
reference_id ASA-201801-25
reference_type
scores
url https://security.archlinux.org/ASA-201801-25
11
reference_url https://security.archlinux.org/ASA-201801-26
reference_id ASA-201801-26
reference_type
scores
url https://security.archlinux.org/ASA-201801-26
12
reference_url https://security.archlinux.org/AVG-593
reference_id AVG-593
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-593
13
reference_url https://security.archlinux.org/AVG-594
reference_id AVG-594
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-594
14
reference_url https://security.archlinux.org/AVG-595
reference_id AVG-595
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-595
15
reference_url https://security.archlinux.org/AVG-596
reference_id AVG-596
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-596
16
reference_url https://security.archlinux.org/AVG-597
reference_id AVG-597
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-597
17
reference_url https://security.archlinux.org/AVG-598
reference_id AVG-598
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-598
18
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
19
reference_url https://usn.ubuntu.com/3554-1/
reference_id USN-3554-1
reference_type
scores
url https://usn.ubuntu.com/3554-1/
20
reference_url https://usn.ubuntu.com/3554-2/
reference_id USN-3554-2
reference_type
scores
url https://usn.ubuntu.com/3554-2/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000007
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rt5e-saz2-j7c9
77
url VCID-s2gu-8jpq-mub9
vulnerability_id VCID-s2gu-8jpq-mub9
summary Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json
reference_id
reference_type
scores
0
value 2.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7167.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7167
reference_id
reference_type
scores
0
value 0.02257
scoring_system epss
scoring_elements 0.84935
published_at 2026-06-05T12:55:00Z
1
value 0.02257
scoring_system epss
scoring_elements 0.8491
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7167
2
reference_url https://curl.se/docs/CVE-2016-7167.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-7167.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1375906
reference_id 1375906
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1375906
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837945
reference_id 837945
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837945
7
reference_url https://security.archlinux.org/ASA-201609-18
reference_id ASA-201609-18
reference_type
scores
url https://security.archlinux.org/ASA-201609-18
8
reference_url https://security.archlinux.org/ASA-201609-19
reference_id ASA-201609-19
reference_type
scores
url https://security.archlinux.org/ASA-201609-19
9
reference_url https://security.archlinux.org/AVG-20
reference_id AVG-20
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-20
10
reference_url https://security.archlinux.org/AVG-21
reference_id AVG-21
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-21
11
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
12
reference_url https://access.redhat.com/errata/RHSA-2017:2016
reference_id RHSA-2017:2016
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2016
13
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-7167
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s2gu-8jpq-mub9
78
url VCID-s6gu-gm97-fyfk
vulnerability_id VCID-s6gu-gm97-fyfk
summary The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3145.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3145
reference_id
reference_type
scores
0
value 0.67994
scoring_system epss
scoring_elements 0.98609
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3145
2
reference_url https://curl.se/docs/CVE-2015-3145.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3145.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213347
reference_id 1213347
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213347
5
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
6
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3145
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s6gu-gm97-fyfk
79
url VCID-sesh-938m-x3f8
vulnerability_id VCID-sesh-938m-x3f8
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8618.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
reference_id
reference_type
scores
0
value 0.01811
scoring_system epss
scoring_elements 0.83202
published_at 2026-06-05T12:55:00Z
1
value 0.01811
scoring_system epss
scoring_elements 0.83176
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8618
2
reference_url https://curl.se/docs/CVE-2016-8618.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8618.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388378
reference_id 1388378
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388378
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
19
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
20
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
21
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
22
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8618
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sesh-938m-x3f8
80
url VCID-sf3g-v5kx-kkh4
vulnerability_id VCID-sf3g-v5kx-kkh4
summary Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-19909
reference_id
reference_type
scores
0
value 0.00018
scoring_system epss
scoring_elements 0.05086
published_at 2026-06-04T12:55:00Z
1
value 0.00018
scoring_system epss
scoring_elements 0.05103
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-19909
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19909
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19909
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/curl/curl/pull/4166
reference_id 4166
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-08T18:11:17Z/
url https://github.com/curl/curl/pull/4166
4
reference_url https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/
reference_id cve-2020-19909-is-everything-that-is-wrong-with-cves
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-08T18:11:17Z/
url https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2020-19909
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sf3g-v5kx-kkh4
81
url VCID-snsg-c2up-b7cn
vulnerability_id VCID-snsg-c2up-b7cn
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8623.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8623
reference_id
reference_type
scores
0
value 0.01171
scoring_system epss
scoring_elements 0.79018
published_at 2026-06-04T12:55:00Z
1
value 0.01171
scoring_system epss
scoring_elements 0.79044
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8623
2
reference_url https://curl.se/docs/CVE-2016-8623.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8623.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388388
reference_id 1388388
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388388
16
reference_url http://www.securityfocus.com/bid/94106
reference_id 94106
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url http://www.securityfocus.com/bid/94106
17
reference_url https://curl.haxx.se/docs/adv_20161102I.html
reference_id adv_20161102I.html
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://curl.haxx.se/docs/adv_20161102I.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8623.patch
reference_id CVE-2016-8623.patch
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://curl.haxx.se/CVE-2016-8623.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8623
reference_id show_bug.cgi?id=CVE-2016-8623
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8623
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:46:38Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8623
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-snsg-c2up-b7cn
82
url VCID-sutv-qt2x-2yc7
vulnerability_id VCID-sutv-qt2x-2yc7
summary An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28322.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
reference_id
reference_type
scores
0
value 0.00631
scoring_system epss
scoring_elements 0.70725
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28322
2
reference_url https://curl.se/docs/CVE-2023-28322.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2023-28322.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/1954658
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://hackerone.com/reports/1954658
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
reference_id 1036239
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036239
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
reference_id 2196793
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196793
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/47
reference_id 47
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/47
9
reference_url http://seclists.org/fulldisclosure/2023/Jul/48
reference_id 48
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/48
10
reference_url http://seclists.org/fulldisclosure/2023/Jul/52
reference_id 52
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url http://seclists.org/fulldisclosure/2023/Jul/52
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
reference_id F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
12
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.gentoo.org/glsa/202310-12
13
reference_url https://support.apple.com/kb/HT213843
reference_id HT213843
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213843
14
reference_url https://support.apple.com/kb/HT213844
reference_id HT213844
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213844
15
reference_url https://support.apple.com/kb/HT213845
reference_id HT213845
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://support.apple.com/kb/HT213845
16
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
reference_id msg00015.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
17
reference_url https://security.netapp.com/advisory/ntap-20230609-0009/
reference_id ntap-20230609-0009
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://security.netapp.com/advisory/ntap-20230609-0009/
18
reference_url https://access.redhat.com/errata/RHSA-2023:4354
reference_id RHSA-2023:4354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4354
19
reference_url https://access.redhat.com/errata/RHSA-2023:4628
reference_id RHSA-2023:4628
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4628
20
reference_url https://access.redhat.com/errata/RHSA-2023:4629
reference_id RHSA-2023:4629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4629
21
reference_url https://access.redhat.com/errata/RHSA-2023:5598
reference_id RHSA-2023:5598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5598
22
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
23
reference_url https://access.redhat.com/errata/RHSA-2024:0585
reference_id RHSA-2024:0585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0585
24
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
25
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
26
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
27
reference_url https://usn.ubuntu.com/6237-1/
reference_id USN-6237-1
reference_type
scores
url https://usn.ubuntu.com/6237-1/
28
reference_url https://usn.ubuntu.com/6237-3/
reference_id USN-6237-3
reference_type
scores
url https://usn.ubuntu.com/6237-3/
29
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
reference_id Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-13T19:43:16Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-28322
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sutv-qt2x-2yc7
83
url VCID-swmn-7ns9-ekg1
vulnerability_id VCID-swmn-7ns9-ekg1
summary An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000257.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000257
reference_id
reference_type
scores
0
value 0.00863
scoring_system epss
scoring_elements 0.75467
published_at 2026-06-05T12:55:00Z
1
value 0.00863
scoring_system epss
scoring_elements 0.75438
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000257
2
reference_url https://curl.se/docs/CVE-2017-1000257.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-1000257.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:P/A:P
1
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securityfocus.com/bid/101519
reference_id 101519
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url http://www.securityfocus.com/bid/101519
6
reference_url http://www.securitytracker.com/id/1039644
reference_id 1039644
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url http://www.securitytracker.com/id/1039644
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1503705
reference_id 1503705
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1503705
8
reference_url https://curl.haxx.se/docs/adv_20171023.html
reference_id adv_20171023.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url https://curl.haxx.se/docs/adv_20171023.html
9
reference_url https://security.archlinux.org/ASA-201711-10
reference_id ASA-201711-10
reference_type
scores
url https://security.archlinux.org/ASA-201711-10
10
reference_url https://security.archlinux.org/ASA-201711-11
reference_id ASA-201711-11
reference_type
scores
url https://security.archlinux.org/ASA-201711-11
11
reference_url https://security.archlinux.org/ASA-201711-6
reference_id ASA-201711-6
reference_type
scores
url https://security.archlinux.org/ASA-201711-6
12
reference_url https://security.archlinux.org/ASA-201711-7
reference_id ASA-201711-7
reference_type
scores
url https://security.archlinux.org/ASA-201711-7
13
reference_url https://security.archlinux.org/ASA-201711-8
reference_id ASA-201711-8
reference_type
scores
url https://security.archlinux.org/ASA-201711-8
14
reference_url https://security.archlinux.org/ASA-201711-9
reference_id ASA-201711-9
reference_type
scores
url https://security.archlinux.org/ASA-201711-9
15
reference_url https://security.archlinux.org/AVG-462
reference_id AVG-462
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-462
16
reference_url https://security.archlinux.org/AVG-463
reference_id AVG-463
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-463
17
reference_url https://security.archlinux.org/AVG-464
reference_id AVG-464
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-464
18
reference_url https://security.archlinux.org/AVG-465
reference_id AVG-465
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-465
19
reference_url https://security.archlinux.org/AVG-466
reference_id AVG-466
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-466
20
reference_url https://security.archlinux.org/AVG-467
reference_id AVG-467
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-467
21
reference_url http://www.debian.org/security/2017/dsa-4007
reference_id dsa-4007
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url http://www.debian.org/security/2017/dsa-4007
22
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url https://security.gentoo.org/glsa/201712-04
23
reference_url https://access.redhat.com/errata/RHSA-2017:3263
reference_id RHSA-2017:3263
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T21:02:33Z/
url https://access.redhat.com/errata/RHSA-2017:3263
24
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
25
reference_url https://usn.ubuntu.com/3457-1/
reference_id USN-3457-1
reference_type
scores
url https://usn.ubuntu.com/3457-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2017-1000257
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-swmn-7ns9-ekg1
84
url VCID-tcxd-z7f3-kkes
vulnerability_id VCID-tcxd-z7f3-kkes
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5436.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5436
reference_id
reference_type
scores
0
value 0.15484
scoring_system epss
scoring_elements 0.94797
published_at 2026-06-05T12:55:00Z
1
value 0.15484
scoring_system epss
scoring_elements 0.94788
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5436
2
reference_url https://curl.se/docs/CVE-2019-5436.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5436.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5436
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/550696
reference_id
reference_type
scores
url https://hackerone.com/reports/550696
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1710620
reference_id 1710620
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1710620
7
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://seclists.org/bugtraq/2020/Feb/36
8
reference_url http://www.openwall.com/lists/oss-security/2019/09/11/6
reference_id 6
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://www.openwall.com/lists/oss-security/2019/09/11/6
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929351
reference_id 929351
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929351
10
reference_url https://security.archlinux.org/ASA-201905-11
reference_id ASA-201905-11
reference_type
scores
url https://security.archlinux.org/ASA-201905-11
11
reference_url https://security.archlinux.org/ASA-201905-12
reference_id ASA-201905-12
reference_type
scores
url https://security.archlinux.org/ASA-201905-12
12
reference_url https://security.archlinux.org/ASA-201905-13
reference_id ASA-201905-13
reference_type
scores
url https://security.archlinux.org/ASA-201905-13
13
reference_url https://security.archlinux.org/ASA-201905-14
reference_id ASA-201905-14
reference_type
scores
url https://security.archlinux.org/ASA-201905-14
14
reference_url https://security.archlinux.org/ASA-201905-15
reference_id ASA-201905-15
reference_type
scores
url https://security.archlinux.org/ASA-201905-15
15
reference_url https://security.archlinux.org/ASA-201905-16
reference_id ASA-201905-16
reference_type
scores
url https://security.archlinux.org/ASA-201905-16
16
reference_url https://security.archlinux.org/AVG-959
reference_id AVG-959
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-959
17
reference_url https://security.archlinux.org/AVG-960
reference_id AVG-960
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-960
18
reference_url https://security.archlinux.org/AVG-961
reference_id AVG-961
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-961
19
reference_url https://security.archlinux.org/AVG-962
reference_id AVG-962
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-962
20
reference_url https://security.archlinux.org/AVG-963
reference_id AVG-963
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-963
21
reference_url https://security.archlinux.org/AVG-964
reference_id AVG-964
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-964
22
reference_url https://curl.haxx.se/docs/CVE-2019-5436.html
reference_id CVE-2019-5436.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://curl.haxx.se/docs/CVE-2019-5436.html
23
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://www.debian.org/security/2020/dsa-4633
24
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://security.gentoo.org/glsa/202003-29
25
reference_url https://support.f5.com/csp/article/K55133295
reference_id K55133295
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://support.f5.com/csp/article/K55133295
26
reference_url https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K55133295?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS
27
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
reference_id msg00008.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html
28
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html
29
reference_url https://security.netapp.com/advisory/ntap-20190606-0004/
reference_id ntap-20190606-0004
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://security.netapp.com/advisory/ntap-20190606-0004/
30
reference_url https://access.redhat.com/errata/RHSA-2020:1020
reference_id RHSA-2020:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1020
31
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
32
reference_url https://access.redhat.com/errata/RHSA-2020:2505
reference_id RHSA-2020:2505
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2505
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
reference_id SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:51:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/
34
reference_url https://usn.ubuntu.com/3993-1/
reference_id USN-3993-1
reference_type
scores
url https://usn.ubuntu.com/3993-1/
35
reference_url https://usn.ubuntu.com/3993-2/
reference_id USN-3993-2
reference_type
scores
url https://usn.ubuntu.com/3993-2/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2019-5436
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tcxd-z7f3-kkes
85
url VCID-td39-d3tf-vkhc
vulnerability_id VCID-td39-d3tf-vkhc
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22924.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
reference_id
reference_type
scores
0
value 0.0056
scoring_system epss
scoring_elements 0.68682
published_at 2026-06-05T12:55:00Z
1
value 0.0056
scoring_system epss
scoring_elements 0.68641
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22924
2
reference_url https://curl.se/docs/CVE-2021-22924.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2021-22924.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1223565
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://hackerone.com/reports/1223565
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
reference_id 1981460
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1981460
21
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
reference_id 991492
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991492
22
reference_url https://security.archlinux.org/ASA-202107-59
reference_id ASA-202107-59
reference_type
scores
url https://security.archlinux.org/ASA-202107-59
23
reference_url https://security.archlinux.org/ASA-202107-60
reference_id ASA-202107-60
reference_type
scores
url https://security.archlinux.org/ASA-202107-60
24
reference_url https://security.archlinux.org/ASA-202107-61
reference_id ASA-202107-61
reference_type
scores
url https://security.archlinux.org/ASA-202107-61
25
reference_url https://security.archlinux.org/ASA-202107-62
reference_id ASA-202107-62
reference_type
scores
url https://security.archlinux.org/ASA-202107-62
26
reference_url https://security.archlinux.org/ASA-202107-63
reference_id ASA-202107-63
reference_type
scores
url https://security.archlinux.org/ASA-202107-63
27
reference_url https://security.archlinux.org/ASA-202107-64
reference_id ASA-202107-64
reference_type
scores
url https://security.archlinux.org/ASA-202107-64
28
reference_url https://security.archlinux.org/AVG-2194
reference_id AVG-2194
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2194
29
reference_url https://security.archlinux.org/AVG-2195
reference_id AVG-2195
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2195
30
reference_url https://security.archlinux.org/AVG-2196
reference_id AVG-2196
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2196
31
reference_url https://security.archlinux.org/AVG-2197
reference_id AVG-2197
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2197
32
reference_url https://security.archlinux.org/AVG-2198
reference_id AVG-2198
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2198
33
reference_url https://security.archlinux.org/AVG-2199
reference_id AVG-2199
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2199
34
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
reference_id CVE-2021-22924
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-22924
35
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://www.debian.org/security/2022/dsa-5197
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
reference_id FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/
37
reference_url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html
38
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
39
reference_url https://security.netapp.com/advisory/ntap-20210902-0003/
reference_id ntap-20210902-0003
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://security.netapp.com/advisory/ntap-20210902-0003/
40
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_id r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_id rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E
44
reference_url https://access.redhat.com/errata/RHSA-2021:3582
reference_id RHSA-2021:3582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3582
45
reference_url https://access.redhat.com/errata/RHSA-2022:1354
reference_id RHSA-2022:1354
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:1354
46
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
reference_id ssa-484086.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
47
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
reference_id ssa-732250.pdf
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-27T19:35:55Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf
48
reference_url https://usn.ubuntu.com/5021-1/
reference_id USN-5021-1
reference_type
scores
url https://usn.ubuntu.com/5021-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2021-22924
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-td39-d3tf-vkhc
86
url VCID-tn33-re3r-yfhw
vulnerability_id VCID-tn33-re3r-yfhw
summary 
Out-of-bounds Write
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
references
0
reference_url https://access.redhat.com/errata/RHBA-2019:0327
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2019:0327
1
reference_url https://access.redhat.com/errata/RHSA-2018:3157
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3157
2
reference_url https://access.redhat.com/errata/RHSA-2018:3558
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3558
3
reference_url https://access.redhat.com/errata/RHSA-2019:1543
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1543
4
reference_url https://access.redhat.com/errata/RHSA-2020:0544
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0544
5
reference_url https://access.redhat.com/errata/RHSA-2020:0594
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0594
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000120.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
reference_id
reference_type
scores
0
value 0.01298
scoring_system epss
scoring_elements 0.80056
published_at 2026-06-04T12:55:00Z
1
value 0.01298
scoring_system epss
scoring_elements 0.80081
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1000120
8
reference_url https://curl.haxx.se/docs/adv_2018-9cd6.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.haxx.se/docs/adv_2018-9cd6.html
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000120
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000121
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000122
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://github.com/coapp-packages/curl
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/coapp-packages/curl
14
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html
15
reference_url https://usn.ubuntu.com/3598-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-1
16
reference_url https://usn.ubuntu.com/3598-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-1/
17
reference_url https://usn.ubuntu.com/3598-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/3598-2
18
reference_url https://usn.ubuntu.com/3598-2/
reference_id
reference_type
scores
url https://usn.ubuntu.com/3598-2/
19
reference_url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134105/http://www.securitytracker.com/id/1040531
20
reference_url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201220134609/http://www.securityfocus.com/bid/103414
21
reference_url https://www.debian.org/security/2018/dsa-4136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2018/dsa-4136
22
reference_url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
23
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
24
reference_url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
25
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
26
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
reference_id 1552628
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1552628
28
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
reference_id 893546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893546
29
reference_url https://security.archlinux.org/ASA-201803-15
reference_id ASA-201803-15
reference_type
scores
url https://security.archlinux.org/ASA-201803-15
30
reference_url https://security.archlinux.org/ASA-201803-16
reference_id ASA-201803-16
reference_type
scores
url https://security.archlinux.org/ASA-201803-16
31
reference_url https://security.archlinux.org/ASA-201803-17
reference_id ASA-201803-17
reference_type
scores
url https://security.archlinux.org/ASA-201803-17
32
reference_url https://security.archlinux.org/ASA-201803-18
reference_id ASA-201803-18
reference_type
scores
url https://security.archlinux.org/ASA-201803-18
33
reference_url https://security.archlinux.org/ASA-201803-19
reference_id ASA-201803-19
reference_type
scores
url https://security.archlinux.org/ASA-201803-19
34
reference_url https://security.archlinux.org/ASA-201803-20
reference_id ASA-201803-20
reference_type
scores
url https://security.archlinux.org/ASA-201803-20
35
reference_url https://security.archlinux.org/AVG-653
reference_id AVG-653
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-653
36
reference_url https://security.archlinux.org/AVG-654
reference_id AVG-654
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-654
37
reference_url https://security.archlinux.org/AVG-655
reference_id AVG-655
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-655
38
reference_url https://security.archlinux.org/AVG-656
reference_id AVG-656
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-656
39
reference_url https://security.archlinux.org/AVG-660
reference_id AVG-660
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-660
40
reference_url https://security.archlinux.org/AVG-661
reference_id AVG-661
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-661
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
reference_id CVE-2018-1000120
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000120
42
reference_url https://curl.se/docs/CVE-2018-1000120.html
reference_id CVE-2018-1000120.HTML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value High
scoring_system cvssv3.1
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://curl.se/docs/CVE-2018-1000120.html
43
reference_url https://github.com/advisories/GHSA-674j-7m97-j2p9
reference_id GHSA-674j-7m97-j2p9
reference_type
scores
url https://github.com/advisories/GHSA-674j-7m97-j2p9
44
reference_url https://security.gentoo.org/glsa/201804-04
reference_id GLSA-201804-04
reference_type
scores
url https://security.gentoo.org/glsa/201804-04
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
2
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-1000120, GHSA-674j-7m97-j2p9
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tn33-re3r-yfhw
87
url VCID-tyqp-e8cp-dbbm
vulnerability_id VCID-tyqp-e8cp-dbbm
summary cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
reference_id
reference_type
scores
0
value 0.01203
scoring_system epss
scoring_elements 0.79289
published_at 2026-06-05T12:55:00Z
1
value 0.01626
scoring_system epss
scoring_elements 0.82203
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
2
reference_url https://curl.se/docs/CVE-2014-0139.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0139.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
reference_id 1079149
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0139
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tyqp-e8cp-dbbm
88
url VCID-tzs5-qzhn-rqbk
vulnerability_id VCID-tzs5-qzhn-rqbk
summary denial of service
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32205.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32205.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32205
reference_id
reference_type
scores
0
value 0.02247
scoring_system epss
scoring_elements 0.84904
published_at 2026-06-05T12:55:00Z
1
value 0.02247
scoring_system epss
scoring_elements 0.84882
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32205
2
reference_url https://curl.se/docs/CVE-2022-32205.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32205.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1569946
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://hackerone.com/reports/1569946
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099296
reference_id 2099296
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099296
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
23
reference_url https://security.archlinux.org/AVG-2771
reference_id AVG-2771
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2771
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://support.apple.com/kb/HT213488
28
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:54Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
29
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-32205
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tzs5-qzhn-rqbk
89
url VCID-ubnn-z97k-47gw
vulnerability_id VCID-ubnn-z97k-47gw
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16840.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16840
reference_id
reference_type
scores
0
value 0.0029
scoring_system epss
scoring_elements 0.52698
published_at 2026-06-05T12:55:00Z
1
value 0.0029
scoring_system epss
scoring_elements 0.52638
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16840
2
reference_url https://curl.se/docs/CVE-2018-16840.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16840.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16840
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16840
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1042013
reference_id 1042013
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url http://www.securitytracker.com/id/1042013
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1642203
reference_id 1642203
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1642203
7
reference_url https://usn.ubuntu.com/3805-1/
reference_id 3805-1
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url https://usn.ubuntu.com/3805-1/
8
reference_url https://github.com/curl/curl/commit/81d135d67155c5295b1033679c606165d4e28f3f
reference_id 81d135d67155c5295b1033679c606165d4e28f3f
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url https://github.com/curl/curl/commit/81d135d67155c5295b1033679c606165d4e28f3f
9
reference_url https://security.archlinux.org/ASA-201811-4
reference_id ASA-201811-4
reference_type
scores
url https://security.archlinux.org/ASA-201811-4
10
reference_url https://security.archlinux.org/ASA-201811-5
reference_id ASA-201811-5
reference_type
scores
url https://security.archlinux.org/ASA-201811-5
11
reference_url https://security.archlinux.org/ASA-201811-6
reference_id ASA-201811-6
reference_type
scores
url https://security.archlinux.org/ASA-201811-6
12
reference_url https://security.archlinux.org/ASA-201811-7
reference_id ASA-201811-7
reference_type
scores
url https://security.archlinux.org/ASA-201811-7
13
reference_url https://security.archlinux.org/ASA-201811-8
reference_id ASA-201811-8
reference_type
scores
url https://security.archlinux.org/ASA-201811-8
14
reference_url https://security.archlinux.org/ASA-201811-9
reference_id ASA-201811-9
reference_type
scores
url https://security.archlinux.org/ASA-201811-9
15
reference_url https://security.archlinux.org/AVG-795
reference_id AVG-795
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-795
16
reference_url https://security.archlinux.org/AVG-796
reference_id AVG-796
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-796
17
reference_url https://security.archlinux.org/AVG-797
reference_id AVG-797
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-797
18
reference_url https://security.archlinux.org/AVG-798
reference_id AVG-798
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-798
19
reference_url https://security.archlinux.org/AVG-799
reference_id AVG-799
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-799
20
reference_url https://security.archlinux.org/AVG-800
reference_id AVG-800
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-800
21
reference_url https://curl.haxx.se/docs/CVE-2018-16840.html
reference_id CVE-2018-16840.html
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url https://curl.haxx.se/docs/CVE-2018-16840.html
22
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url https://security.gentoo.org/glsa/201903-03
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16840
reference_id show_bug.cgi?id=CVE-2018-16840
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:08:48Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16840
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-16840
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ubnn-z97k-47gw
90
url VCID-ugrr-z2zv-6qgp
vulnerability_id VCID-ugrr-z2zv-6qgp
summary curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7141.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-7141
reference_id
reference_type
scores
0
value 0.00524
scoring_system epss
scoring_elements 0.67282
published_at 2026-06-04T12:55:00Z
1
value 0.00524
scoring_system epss
scoring_elements 0.67324
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-7141
2
reference_url https://curl.se/docs/CVE-2016-7141.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-7141.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7141
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1373229
reference_id 1373229
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1373229
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836918
reference_id 836918
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836918
6
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
7
reference_url https://access.redhat.com/errata/RHSA-2016:2575
reference_id RHSA-2016:2575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2575
8
reference_url https://access.redhat.com/errata/RHSA-2016:2957
reference_id RHSA-2016:2957
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2957
9
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-7141
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ugrr-z2zv-6qgp
91
url VCID-uh5a-zcds-3bcc
vulnerability_id VCID-uh5a-zcds-3bcc
summary cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
reference_id
reference_type
scores
0
value 0.0182
scoring_system epss
scoring_elements 0.83211
published_at 2026-06-04T12:55:00Z
1
value 0.0182
scoring_system epss
scoring_elements 0.83237
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
2
reference_url https://curl.se/docs/CVE-2014-3613.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3613.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
reference_id 1136154
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
5
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
6
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
7
reference_url https://usn.ubuntu.com/2346-1/
reference_id USN-2346-1
reference_type
scores
url https://usn.ubuntu.com/2346-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-3613
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uh5a-zcds-3bcc
92
url VCID-uj78-2cgz-zbdb
vulnerability_id VCID-uj78-2cgz-zbdb
summary Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5481.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5481
reference_id
reference_type
scores
0
value 0.03612
scoring_system epss
scoring_elements 0.87996
published_at 2026-06-04T12:55:00Z
1
value 0.03612
scoring_system epss
scoring_elements 0.88017
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5481
2
reference_url https://curl.se/docs/CVE-2019-5481.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5481.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5481
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://hackerone.com/reports/686823
reference_id
reference_type
scores
url https://hackerone.com/reports/686823
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1749402
reference_id 1749402
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1749402
8
reference_url https://seclists.org/bugtraq/2020/Feb/36
reference_id 36
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://seclists.org/bugtraq/2020/Feb/36
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
reference_id 6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940009
reference_id 940009
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940009
11
reference_url https://security.archlinux.org/AVG-1982
reference_id AVG-1982
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1982
12
reference_url https://curl.haxx.se/docs/CVE-2019-5481.html
reference_id CVE-2019-5481.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://curl.haxx.se/docs/CVE-2019-5481.html
13
reference_url https://www.debian.org/security/2020/dsa-4633
reference_id dsa-4633
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://www.debian.org/security/2020/dsa-4633
14
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://security.gentoo.org/glsa/202003-29
15
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
reference_id msg00048.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
16
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
reference_id msg00055.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
17
reference_url https://security.netapp.com/advisory/ntap-20191004-0003/
reference_id ntap-20191004-0003
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://security.netapp.com/advisory/ntap-20191004-0003/
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
reference_id RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
19
reference_url https://access.redhat.com/errata/RHSA-2020:0250
reference_id RHSA-2020:0250
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0250
20
reference_url https://access.redhat.com/errata/RHSA-2020:1792
reference_id RHSA-2020:1792
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1792
21
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
reference_id UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-16T14:07:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
22
reference_url https://usn.ubuntu.com/4129-1/
reference_id USN-4129-1
reference_type
scores
url https://usn.ubuntu.com/4129-1/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
2
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2019-5481
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uj78-2cgz-zbdb
93
url VCID-urgp-rqyc-sqer
vulnerability_id VCID-urgp-rqyc-sqer
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27775.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27775.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27775
reference_id
reference_type
scores
0
value 0.00152
scoring_system epss
scoring_elements 0.35695
published_at 2026-06-05T12:55:00Z
1
value 0.00152
scoring_system epss
scoring_elements 0.35593
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27775
2
reference_url https://curl.se/docs/CVE-2022-27775.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27775.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1546268
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:32:36Z/
url https://hackerone.com/reports/1546268
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010253
reference_id 1010253
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010253
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2078388
reference_id 2078388
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2078388
22
reference_url https://security.archlinux.org/AVG-2685
reference_id AVG-2685
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2685
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:32:36Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:32:36Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://security.netapp.com/advisory/ntap-20220609-0008/
reference_id ntap-20220609-0008
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:32:36Z/
url https://security.netapp.com/advisory/ntap-20220609-0008/
26
reference_url https://access.redhat.com/errata/RHSA-2022:8299
reference_id RHSA-2022:8299
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8299
27
reference_url https://usn.ubuntu.com/5397-1/
reference_id USN-5397-1
reference_type
scores
url https://usn.ubuntu.com/5397-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-27775
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-urgp-rqyc-sqer
94
url VCID-vfc1-yy11-bycp
vulnerability_id VCID-vfc1-yy11-bycp
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8619.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8619
reference_id
reference_type
scores
0
value 0.03314
scoring_system epss
scoring_elements 0.87506
published_at 2026-06-05T12:55:00Z
1
value 0.03314
scoring_system epss
scoring_elements 0.87485
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8619
2
reference_url https://curl.se/docs/CVE-2016-8619.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8619.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388379
reference_id 1388379
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388379
15
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
16
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
17
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
18
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
19
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
20
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
21
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
22
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
23
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
24
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
25
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
26
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
27
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
28
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8619
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vfc1-yy11-bycp
95
url VCID-vpkr-9akj-hbf6
vulnerability_id VCID-vpkr-9akj-hbf6
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27782
reference_id
reference_type
scores
0
value 0.00469
scoring_system epss
scoring_elements 0.64872
published_at 2026-06-04T12:55:00Z
1
value 0.00469
scoring_system epss
scoring_elements 0.64914
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27782
2
reference_url https://curl.se/docs/CVE-2022-27782.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27782.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1555796
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://hackerone.com/reports/1555796
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2082215
reference_id 2082215
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2082215
21
reference_url http://www.openwall.com/lists/oss-security/2023/03/20/6
reference_id 6
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url http://www.openwall.com/lists/oss-security/2023/03/20/6
22
reference_url https://security.archlinux.org/AVG-2706
reference_id AVG-2706
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2706
23
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://www.debian.org/security/2022/dsa-5197
24
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://security.gentoo.org/glsa/202212-01
25
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
26
reference_url https://security.netapp.com/advisory/ntap-20220609-0009/
reference_id ntap-20220609-0009
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:54:53Z/
url https://security.netapp.com/advisory/ntap-20220609-0009/
27
reference_url https://access.redhat.com/errata/RHSA-2022:5245
reference_id RHSA-2022:5245
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5245
28
reference_url https://access.redhat.com/errata/RHSA-2022:5313
reference_id RHSA-2022:5313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5313
29
reference_url https://usn.ubuntu.com/5412-1/
reference_id USN-5412-1
reference_type
scores
url https://usn.ubuntu.com/5412-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-27782
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vpkr-9akj-hbf6
96
url VCID-w472-84ep-fkdx
vulnerability_id VCID-w472-84ep-fkdx
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38546.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
reference_id
reference_type
scores
0
value 0.00441
scoring_system epss
scoring_elements 0.63576
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38546
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2148242
reference_id
reference_type
scores
url https://hackerone.com/reports/2148242
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
reference_id 2241938
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2241938
7
reference_url http://seclists.org/fulldisclosure/2024/Jan/34
reference_id 34
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/34
8
reference_url http://seclists.org/fulldisclosure/2024/Jan/37
reference_id 37
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/37
9
reference_url http://seclists.org/fulldisclosure/2024/Jan/38
reference_id 38
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url http://seclists.org/fulldisclosure/2024/Jan/38
10
reference_url https://security.archlinux.org/AVG-2845
reference_id AVG-2845
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2845
11
reference_url https://security.archlinux.org/AVG-2846
reference_id AVG-2846
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2846
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
reference_id CVE-2023-38546
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-38546
13
reference_url https://curl.se/docs/CVE-2023-38546.html
reference_id CVE-2023-38546.HTML
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://curl.se/docs/CVE-2023-38546.html
14
reference_url https://security.gentoo.org/glsa/202310-12
reference_id GLSA-202310-12
reference_type
scores
url https://security.gentoo.org/glsa/202310-12
15
reference_url https://support.apple.com/kb/HT214036
reference_id HT214036
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214036
16
reference_url https://support.apple.com/kb/HT214057
reference_id HT214057
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214057
17
reference_url https://support.apple.com/kb/HT214058
reference_id HT214058
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214058
18
reference_url https://support.apple.com/kb/HT214063
reference_id HT214063
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://support.apple.com/kb/HT214063
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
reference_id OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
20
reference_url https://access.redhat.com/errata/RHSA-2023:5700
reference_id RHSA-2023:5700
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5700
21
reference_url https://access.redhat.com/errata/RHSA-2023:5763
reference_id RHSA-2023:5763
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5763
22
reference_url https://access.redhat.com/errata/RHSA-2023:6292
reference_id RHSA-2023:6292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6292
23
reference_url https://access.redhat.com/errata/RHSA-2023:6745
reference_id RHSA-2023:6745
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6745
24
reference_url https://access.redhat.com/errata/RHSA-2023:7540
reference_id RHSA-2023:7540
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7540
25
reference_url https://access.redhat.com/errata/RHSA-2023:7625
reference_id RHSA-2023:7625
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7625
26
reference_url https://access.redhat.com/errata/RHSA-2023:7626
reference_id RHSA-2023:7626
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7626
27
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
28
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
29
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
30
reference_url https://access.redhat.com/errata/RHSA-2024:2101
reference_id RHSA-2024:2101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2101
31
reference_url https://usn.ubuntu.com/6429-1/
reference_id USN-6429-1
reference_type
scores
url https://usn.ubuntu.com/6429-1/
32
reference_url https://usn.ubuntu.com/6429-2/
reference_id USN-6429-2
reference_type
scores
url https://usn.ubuntu.com/6429-2/
33
reference_url https://usn.ubuntu.com/6429-3/
reference_id USN-6429-3
reference_type
scores
url https://usn.ubuntu.com/6429-3/
34
reference_url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
reference_id viewtopic.php?f=8&t=8868
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T15:01:53Z/
url https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-38546
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w472-84ep-fkdx
97
url VCID-w63e-dku9-mqe9
vulnerability_id VCID-w63e-dku9-mqe9
summary curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2629.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-2629
reference_id
reference_type
scores
0
value 0.00365
scoring_system epss
scoring_elements 0.58781
published_at 2026-06-04T12:55:00Z
1
value 0.00365
scoring_system epss
scoring_elements 0.58828
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-2629
2
reference_url https://curl.se/docs/CVE-2017-2629.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-2629.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2629
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1425746
reference_id 1425746
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1425746
6
reference_url https://security.archlinux.org/ASA-201703-1
reference_id ASA-201703-1
reference_type
scores
url https://security.archlinux.org/ASA-201703-1
7
reference_url https://security.archlinux.org/AVG-179
reference_id AVG-179
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-179
8
reference_url https://security.archlinux.org/AVG-180
reference_id AVG-180
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-180
9
reference_url https://security.archlinux.org/AVG-181
reference_id AVG-181
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-181
10
reference_url https://security.archlinux.org/AVG-182
reference_id AVG-182
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-182
11
reference_url https://security.archlinux.org/AVG-183
reference_id AVG-183
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-183
12
reference_url https://security.archlinux.org/AVG-184
reference_id AVG-184
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-184
13
reference_url https://security.gentoo.org/glsa/201703-04
reference_id GLSA-201703-04
reference_type
scores
url https://security.gentoo.org/glsa/201703-04
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2017-2629
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w63e-dku9-mqe9
98
url VCID-wbwx-5vg3-uqcd
vulnerability_id VCID-wbwx-5vg3-uqcd
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32206.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32206.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32206
reference_id
reference_type
scores
0
value 0.03367
scoring_system epss
scoring_elements 0.87599
published_at 2026-06-05T12:55:00Z
1
value 0.03367
scoring_system epss
scoring_elements 0.87578
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32206
2
reference_url https://curl.se/docs/CVE-2022-32206.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32206.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1570651
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://hackerone.com/reports/1570651
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099300
reference_id 2099300
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099300
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://www.openwall.com/lists/oss-security/2023/02/15/3
reference_id 3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://www.openwall.com/lists/oss-security/2023/02/15/3
23
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
24
reference_url https://security.archlinux.org/AVG-2817
reference_id AVG-2817
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2817
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
26
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://www.debian.org/security/2022/dsa-5197
27
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://security.gentoo.org/glsa/202212-01
28
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://support.apple.com/kb/HT213488
29
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
30
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:52Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
31
reference_url https://access.redhat.com/errata/RHSA-2022:6157
reference_id RHSA-2022:6157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6157
32
reference_url https://access.redhat.com/errata/RHSA-2022:6159
reference_id RHSA-2022:6159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6159
33
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
34
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
35
reference_url https://access.redhat.com/errata/RHSA-2023:3460
reference_id RHSA-2023:3460
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3460
36
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-32206
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wbwx-5vg3-uqcd
99
url VCID-wmam-qmmg-6uay
vulnerability_id VCID-wmam-qmmg-6uay
summary This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46218.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46218.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-46218
reference_id
reference_type
scores
0
value 0.00219
scoring_system epss
scoring_elements 0.44593
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-46218
2
reference_url https://curl.se/docs/CVE-2023-46218.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://curl.se/docs/CVE-2023-46218.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2212193
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://hackerone.com/reports/2212193
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057646
reference_id 1057646
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057646
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2252030
reference_id 2252030
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2252030
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
reference_id 3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
9
reference_url https://www.debian.org/security/2023/dsa-5587
reference_id dsa-5587
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://www.debian.org/security/2023/dsa-5587
10
reference_url https://security.gentoo.org/glsa/202409-20
reference_id GLSA-202409-20
reference_type
scores
url https://security.gentoo.org/glsa/202409-20
11
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
reference_id msg00015.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
12
reference_url https://security.netapp.com/advisory/ntap-20240125-0007/
reference_id ntap-20240125-0007
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://security.netapp.com/advisory/ntap-20240125-0007/
13
reference_url https://access.redhat.com/errata/RHSA-2024:0428
reference_id RHSA-2024:0428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0428
14
reference_url https://access.redhat.com/errata/RHSA-2024:0434
reference_id RHSA-2024:0434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0434
15
reference_url https://access.redhat.com/errata/RHSA-2024:0452
reference_id RHSA-2024:0452
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0452
16
reference_url https://access.redhat.com/errata/RHSA-2024:0585
reference_id RHSA-2024:0585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0585
17
reference_url https://access.redhat.com/errata/RHSA-2024:1129
reference_id RHSA-2024:1129
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1129
18
reference_url https://access.redhat.com/errata/RHSA-2024:1316
reference_id RHSA-2024:1316
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1316
19
reference_url https://access.redhat.com/errata/RHSA-2024:1317
reference_id RHSA-2024:1317
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1317
20
reference_url https://access.redhat.com/errata/RHSA-2024:1383
reference_id RHSA-2024:1383
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1383
21
reference_url https://access.redhat.com/errata/RHSA-2024:1601
reference_id RHSA-2024:1601
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1601
22
reference_url https://access.redhat.com/errata/RHSA-2024:2092
reference_id RHSA-2024:2092
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2092
23
reference_url https://access.redhat.com/errata/RHSA-2024:2093
reference_id RHSA-2024:2093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2093
24
reference_url https://access.redhat.com/errata/RHSA-2024:2094
reference_id RHSA-2024:2094
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2094
25
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
reference_id UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-28T16:38:08Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
26
reference_url https://usn.ubuntu.com/6535-1/
reference_id USN-6535-1
reference_type
scores
url https://usn.ubuntu.com/6535-1/
27
reference_url https://usn.ubuntu.com/6641-1/
reference_id USN-6641-1
reference_type
scores
url https://usn.ubuntu.com/6641-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2023-46218
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wmam-qmmg-6uay
100
url VCID-xc5k-47n9-43d6
vulnerability_id VCID-xc5k-47n9-43d6
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5435.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5435
reference_id
reference_type
scores
0
value 0.00165
scoring_system epss
scoring_elements 0.37321
published_at 2026-06-05T12:55:00Z
1
value 0.00165
scoring_system epss
scoring_elements 0.37229
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5435
2
reference_url https://curl.se/docs/CVE-2019-5435.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2019-5435.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5435
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5435
4
reference_url https://hackerone.com/reports/547630
reference_id
reference_type
scores
url https://hackerone.com/reports/547630
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1710609
reference_id 1710609
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1710609
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929352
reference_id 929352
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929352
7
reference_url https://security.archlinux.org/ASA-201905-13
reference_id ASA-201905-13
reference_type
scores
url https://security.archlinux.org/ASA-201905-13
8
reference_url https://security.archlinux.org/ASA-201905-14
reference_id ASA-201905-14
reference_type
scores
url https://security.archlinux.org/ASA-201905-14
9
reference_url https://security.archlinux.org/ASA-201905-15
reference_id ASA-201905-15
reference_type
scores
url https://security.archlinux.org/ASA-201905-15
10
reference_url https://security.archlinux.org/AVG-961
reference_id AVG-961
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-961
11
reference_url https://security.archlinux.org/AVG-962
reference_id AVG-962
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-962
12
reference_url https://security.archlinux.org/AVG-963
reference_id AVG-963
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-963
13
reference_url https://security.gentoo.org/glsa/202003-29
reference_id GLSA-202003-29
reference_type
scores
url https://security.gentoo.org/glsa/202003-29
14
reference_url https://access.redhat.com/errata/RHSA-2020:4383
reference_id RHSA-2020:4383
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4383
15
reference_url https://access.redhat.com/errata/RHSA-2020:4384
reference_id RHSA-2020:4384
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4384
16
reference_url https://usn.ubuntu.com/3993-1/
reference_id USN-3993-1
reference_type
scores
url https://usn.ubuntu.com/3993-1/
fixed_packages
0
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2019-5435
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xc5k-47n9-43d6
101
url VCID-xgj8-zrta-kub9
vulnerability_id VCID-xgj8-zrta-kub9
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32208.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32208.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-32208
reference_id
reference_type
scores
0
value 0.0016
scoring_system epss
scoring_elements 0.36635
published_at 2026-06-04T12:55:00Z
1
value 0.0016
scoring_system epss
scoring_elements 0.36728
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-32208
2
reference_url https://curl.se/docs/CVE-2022-32208.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-32208.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1590071
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://hackerone.com/reports/1590071
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2099306
reference_id 2099306
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2099306
21
reference_url http://seclists.org/fulldisclosure/2022/Oct/28
reference_id 28
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url http://seclists.org/fulldisclosure/2022/Oct/28
22
reference_url http://seclists.org/fulldisclosure/2022/Oct/41
reference_id 41
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url http://seclists.org/fulldisclosure/2022/Oct/41
23
reference_url https://security.archlinux.org/AVG-2817
reference_id AVG-2817
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2817
24
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
reference_id BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
25
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://www.debian.org/security/2022/dsa-5197
26
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://security.gentoo.org/glsa/202212-01
27
reference_url https://support.apple.com/kb/HT213488
reference_id HT213488
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://support.apple.com/kb/HT213488
28
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
29
reference_url https://security.netapp.com/advisory/ntap-20220915-0003/
reference_id ntap-20220915-0003
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:30:50Z/
url https://security.netapp.com/advisory/ntap-20220915-0003/
30
reference_url https://access.redhat.com/errata/RHSA-2022:6157
reference_id RHSA-2022:6157
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6157
31
reference_url https://access.redhat.com/errata/RHSA-2022:6159
reference_id RHSA-2022:6159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6159
32
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
33
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
34
reference_url https://usn.ubuntu.com/5495-1/
reference_id USN-5495-1
reference_type
scores
url https://usn.ubuntu.com/5495-1/
35
reference_url https://usn.ubuntu.com/5499-1/
reference_id USN-5499-1
reference_type
scores
url https://usn.ubuntu.com/5499-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-32208
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xgj8-zrta-kub9
102
url VCID-xyze-msxs-1qem
vulnerability_id VCID-xyze-msxs-1qem
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8617.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8617
reference_id
reference_type
scores
0
value 0.00085
scoring_system epss
scoring_elements 0.24771
published_at 2026-06-05T12:55:00Z
1
value 0.00085
scoring_system epss
scoring_elements 0.24672
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8617
2
reference_url https://curl.se/docs/CVE-2016-8617.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8617.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388377
reference_id 1388377
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388377
16
reference_url http://www.securityfocus.com/bid/94097
reference_id 94097
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url http://www.securityfocus.com/bid/94097
17
reference_url https://curl.haxx.se/docs/adv_20161102C.html
reference_id adv_20161102C.html
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://curl.haxx.se/docs/adv_20161102C.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8617.patch
reference_id CVE-2016-8617.patch
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://curl.haxx.se/CVE-2016-8617.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_id r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_id rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617
reference_id show_bug.cgi?id=CVE-2016-8617
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8617
35
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:31:30Z/
url https://www.tenable.com/security/tns-2016-21
36
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8617
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xyze-msxs-1qem
103
url VCID-y41p-tgpa-m7cs
vulnerability_id VCID-y41p-tgpa-m7cs
summary When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8096.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-8096.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-8096
reference_id
reference_type
scores
0
value 0.00559
scoring_system epss
scoring_elements 0.68652
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-8096
2
reference_url https://curl.se/docs/CVE-2024-8096.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Medium
scoring_system cvssv3.1
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://curl.se/docs/CVE-2024-8096.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8096
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://hackerone.com/reports/2669852
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://hackerone.com/reports/2669852
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2310519
reference_id 2310519
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2310519
7
reference_url https://curl.se/docs/CVE-2024-8096.json
reference_id CVE-2024-8096.json
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-11T13:42:47Z/
url https://curl.se/docs/CVE-2024-8096.json
8
reference_url https://usn.ubuntu.com/7012-1/
reference_id USN-7012-1
reference_type
scores
url https://usn.ubuntu.com/7012-1/
fixed_packages
0
url pkg:deb/debian/curl@7.88.1-10%2Bdeb12u7
purl pkg:deb/debian/curl@7.88.1-10%2Bdeb12u7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.88.1-10%252Bdeb12u7
aliases CVE-2024-8096
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y41p-tgpa-m7cs
104
url VCID-yjtj-ydsg-u7ca
vulnerability_id VCID-yjtj-ydsg-u7ca
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27781.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27781.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-27781
reference_id
reference_type
scores
0
value 0.00077
scoring_system epss
scoring_elements 0.23073
published_at 2026-06-04T12:55:00Z
1
value 0.00077
scoring_system epss
scoring_elements 0.23155
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-27781
2
reference_url https://curl.se/docs/CVE-2022-27781.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2022-27781.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22924
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22945
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22946
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22947
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27781
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27782
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32205
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
18
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
19
reference_url https://hackerone.com/reports/1555441
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://hackerone.com/reports/1555441
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2082204
reference_id 2082204
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2082204
21
reference_url https://security.archlinux.org/AVG-2706
reference_id AVG-2706
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2706
22
reference_url https://www.debian.org/security/2022/dsa-5197
reference_id dsa-5197
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://www.debian.org/security/2022/dsa-5197
23
reference_url https://security.gentoo.org/glsa/202212-01
reference_id GLSA-202212-01
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://security.gentoo.org/glsa/202212-01
24
reference_url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
25
reference_url https://security.netapp.com/advisory/ntap-20220609-0009/
reference_id ntap-20220609-0009
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:02:11Z/
url https://security.netapp.com/advisory/ntap-20220609-0009/
26
reference_url https://access.redhat.com/errata/RHSA-2022:8840
reference_id RHSA-2022:8840
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8840
27
reference_url https://access.redhat.com/errata/RHSA-2022:8841
reference_id RHSA-2022:8841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8841
28
reference_url https://usn.ubuntu.com/5412-1/
reference_id USN-5412-1
reference_type
scores
url https://usn.ubuntu.com/5412-1/
29
reference_url https://usn.ubuntu.com/5499-1/
reference_id USN-5499-1
reference_type
scores
url https://usn.ubuntu.com/5499-1/
fixed_packages
0
url pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
purl pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18p4-rvxz-pkeu
1
vulnerability VCID-1dw3-33ju-jkbs
2
vulnerability VCID-1m1w-rayk-sffe
3
vulnerability VCID-21ff-tazv-9ud3
4
vulnerability VCID-287k-bzqy-n7ag
5
vulnerability VCID-39qh-jayw-g3dh
6
vulnerability VCID-5un8-xymy-37bt
7
vulnerability VCID-6ggz-pa5t-77c4
8
vulnerability VCID-7wqd-99h2-e7hk
9
vulnerability VCID-85qb-zec7-subc
10
vulnerability VCID-a8z6-bswu-jue8
11
vulnerability VCID-bcuq-n4vb-k7f3
12
vulnerability VCID-f9nm-d5ax-qkcb
13
vulnerability VCID-fcb7-8163-muf4
14
vulnerability VCID-g7ux-4vz2-ckfg
15
vulnerability VCID-h4nw-va5b-23ef
16
vulnerability VCID-hhms-2hg6-nke9
17
vulnerability VCID-ns58-vmsz-5ued
18
vulnerability VCID-nwvb-d466-4uaa
19
vulnerability VCID-p155-gbtu-abg1
20
vulnerability VCID-secz-78pt-dben
21
vulnerability VCID-ucyf-faft-33bv
22
vulnerability VCID-v82t-s9e1-2fbw
23
vulnerability VCID-w8ff-vxga-8qcz
24
vulnerability VCID-wgur-psum-pbck
25
vulnerability VCID-y41p-tgpa-m7cs
26
vulnerability VCID-y44u-23he-aya8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.74.0-1.3%252Bdeb11u13
aliases CVE-2022-27781
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yjtj-ydsg-u7ca
105
url VCID-zg98-v6dj-s7gv
vulnerability_id VCID-zg98-v6dj-s7gv
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json
reference_id
reference_type
scores
0
value 3.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16842.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16842
reference_id
reference_type
scores
0
value 0.00162
scoring_system epss
scoring_elements 0.36945
published_at 2026-06-05T12:55:00Z
1
value 0.00162
scoring_system epss
scoring_elements 0.36852
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16842
2
reference_url https://curl.se/docs/CVE-2018-16842.html
reference_id
reference_type
scores
0
value Low
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2018-16842.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16839
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16842
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securitytracker.com/id/1042014
reference_id 1042014
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url http://www.securitytracker.com/id/1042014
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1644124
reference_id 1644124
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1644124
8
reference_url https://usn.ubuntu.com/3805-1/
reference_id 3805-1
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://usn.ubuntu.com/3805-1/
9
reference_url https://usn.ubuntu.com/3805-2/
reference_id 3805-2
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://usn.ubuntu.com/3805-2/
10
reference_url https://security.archlinux.org/ASA-201811-4
reference_id ASA-201811-4
reference_type
scores
url https://security.archlinux.org/ASA-201811-4
11
reference_url https://security.archlinux.org/AVG-795
reference_id AVG-795
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-795
12
reference_url https://curl.haxx.se/docs/CVE-2018-16842.html
reference_id CVE-2018-16842.html
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://curl.haxx.se/docs/CVE-2018-16842.html
13
reference_url https://github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211
reference_id d530e92f59ae9bb2d47066c3c460b25d2ffeb211
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211
14
reference_url https://www.debian.org/security/2018/dsa-4331
reference_id dsa-4331
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://www.debian.org/security/2018/dsa-4331
15
reference_url https://security.gentoo.org/glsa/201903-03
reference_id GLSA-201903-03
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://security.gentoo.org/glsa/201903-03
16
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
17
reference_url https://access.redhat.com/errata/RHSA-2019:2181
reference_id RHSA-2019:2181
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://access.redhat.com/errata/RHSA-2019:2181
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842
reference_id show_bug.cgi?id=CVE-2018-16842
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-15T20:56:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
1
url pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
purl pkg:deb/debian/curl@7.64.0-4%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1zsv-4jdy-63en
2
vulnerability VCID-4zcd-rbx3-qye5
3
vulnerability VCID-738z-myg9-37hr
4
vulnerability VCID-7yvu-s3p2-sfhc
5
vulnerability VCID-7z3h-9pk3-rqct
6
vulnerability VCID-a58z-fu87-9ybs
7
vulnerability VCID-azcz-b8f2-63be
8
vulnerability VCID-bx2m-n5ft-3be8
9
vulnerability VCID-cdzf-3ydt-8bdk
10
vulnerability VCID-cfry-nx5h-kudv
11
vulnerability VCID-cjyz-fdnv-b3g4
12
vulnerability VCID-f7n8-zzhz-fuc8
13
vulnerability VCID-fhc8-r8gv-bugj
14
vulnerability VCID-fp66-fzqt-6yg7
15
vulnerability VCID-g4n9-kg3s-pfcr
16
vulnerability VCID-gud1-yg9u-zyfp
17
vulnerability VCID-gueb-wzpx-ufb2
18
vulnerability VCID-h6xj-mys4-pucf
19
vulnerability VCID-j688-cyfg-p7gu
20
vulnerability VCID-jnq1-hk6d-b3a3
21
vulnerability VCID-kkrm-dj79-4ucj
22
vulnerability VCID-kn6z-caj8-bbc9
23
vulnerability VCID-kq38-7s5x-nqaz
24
vulnerability VCID-msd2-35g9-nyd2
25
vulnerability VCID-p97a-kjpp-f3d8
26
vulnerability VCID-q46r-7nct-s3bw
27
vulnerability VCID-q8tg-prj1-y7b8
28
vulnerability VCID-r2g9-c896-rkge
29
vulnerability VCID-razg-yr7y-ukgd
30
vulnerability VCID-sf3g-v5kx-kkh4
31
vulnerability VCID-sutv-qt2x-2yc7
32
vulnerability VCID-td39-d3tf-vkhc
33
vulnerability VCID-tzs5-qzhn-rqbk
34
vulnerability VCID-uj78-2cgz-zbdb
35
vulnerability VCID-urgp-rqyc-sqer
36
vulnerability VCID-vpkr-9akj-hbf6
37
vulnerability VCID-w472-84ep-fkdx
38
vulnerability VCID-wbwx-5vg3-uqcd
39
vulnerability VCID-wmam-qmmg-6uay
40
vulnerability VCID-xgj8-zrta-kub9
41
vulnerability VCID-y41p-tgpa-m7cs
42
vulnerability VCID-yjtj-ydsg-u7ca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.64.0-4%252Bdeb10u2
aliases CVE-2018-16842
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zg98-v6dj-s7gv
106
url VCID-zqyj-7rr3-fqew
vulnerability_id VCID-zqyj-7rr3-fqew
summary The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json
reference_id
reference_type
scores
0
value 2.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7407.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7407
reference_id
reference_type
scores
0
value 0.00201
scoring_system epss
scoring_elements 0.4215
published_at 2026-06-05T12:55:00Z
1
value 0.00201
scoring_system epss
scoring_elements 0.42076
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7407
2
reference_url https://curl.se/docs/CVE-2017-7407.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-7407.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:S/C:P/I:N/A:N
1
value 2.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1439190
reference_id 1439190
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1439190
6
reference_url https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13
reference_id 1890d59905414ab84a35892b2e45833654aa5c13
reference_type
scores
0
value 2.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/
url https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500
reference_id 859500
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859500
8
reference_url https://security.gentoo.org/glsa/201709-14
reference_id GLSA-201709-14
reference_type
scores
0
value 2.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:44:34Z/
url https://security.gentoo.org/glsa/201709-14
9
reference_url https://usn.ubuntu.com/3441-1/
reference_id USN-3441-1
reference_type
scores
url https://usn.ubuntu.com/3441-1/
10
reference_url https://usn.ubuntu.com/3441-2/
reference_id USN-3441-2
reference_type
scores
url https://usn.ubuntu.com/3441-2/
fixed_packages
0
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2017-7407
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zqyj-7rr3-fqew
107
url VCID-zv25-wupq-bqfk
vulnerability_id VCID-zv25-wupq-bqfk
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8621.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8621
reference_id
reference_type
scores
0
value 0.03165
scoring_system epss
scoring_elements 0.87167
published_at 2026-06-04T12:55:00Z
1
value 0.03165
scoring_system epss
scoring_elements 0.8719
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8621
2
reference_url https://curl.se/docs/CVE-2016-8621.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2016-8621.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url http://www.securitytracker.com/id/1037192
reference_id 1037192
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url http://www.securitytracker.com/id/1037192
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1388385
reference_id 1388385
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1388385
16
reference_url http://www.securityfocus.com/bid/94101
reference_id 94101
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url http://www.securityfocus.com/bid/94101
17
reference_url https://curl.haxx.se/docs/adv_20161102G.html
reference_id adv_20161102G.html
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://curl.haxx.se/docs/adv_20161102G.html
18
reference_url https://security.archlinux.org/ASA-201611-10
reference_id ASA-201611-10
reference_type
scores
url https://security.archlinux.org/ASA-201611-10
19
reference_url https://security.archlinux.org/ASA-201611-4
reference_id ASA-201611-4
reference_type
scores
url https://security.archlinux.org/ASA-201611-4
20
reference_url https://security.archlinux.org/ASA-201611-5
reference_id ASA-201611-5
reference_type
scores
url https://security.archlinux.org/ASA-201611-5
21
reference_url https://security.archlinux.org/ASA-201611-7
reference_id ASA-201611-7
reference_type
scores
url https://security.archlinux.org/ASA-201611-7
22
reference_url https://security.archlinux.org/ASA-201611-8
reference_id ASA-201611-8
reference_type
scores
url https://security.archlinux.org/ASA-201611-8
23
reference_url https://security.archlinux.org/ASA-201611-9
reference_id ASA-201611-9
reference_type
scores
url https://security.archlinux.org/ASA-201611-9
24
reference_url https://security.archlinux.org/AVG-60
reference_id AVG-60
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-60
25
reference_url https://security.archlinux.org/AVG-61
reference_id AVG-61
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-61
26
reference_url https://security.archlinux.org/AVG-62
reference_id AVG-62
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-62
27
reference_url https://security.archlinux.org/AVG-63
reference_id AVG-63
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-63
28
reference_url https://security.archlinux.org/AVG-65
reference_id AVG-65
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-65
29
reference_url https://security.archlinux.org/AVG-66
reference_id AVG-66
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-66
30
reference_url https://curl.haxx.se/CVE-2016-8621.patch
reference_id CVE-2016-8621.patch
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://curl.haxx.se/CVE-2016-8621.patch
31
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://security.gentoo.org/glsa/201701-47
32
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621
reference_id show_bug.cgi?id=CVE-2016-8621
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621
33
reference_url https://www.tenable.com/security/tns-2016-21
reference_id tns-2016-21
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T13:33:21Z/
url https://www.tenable.com/security/tns-2016-21
34
reference_url https://usn.ubuntu.com/3123-1/
reference_id USN-3123-1
reference_type
scores
url https://usn.ubuntu.com/3123-1/
fixed_packages
0
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
1
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2016-8621
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zv25-wupq-bqfk
Fixing_vulnerabilities
0
url VCID-1yr3-4rvr-8kcv
vulnerability_id VCID-1yr3-4rvr-8kcv
summary curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0036.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0036.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0036
reference_id
reference_type
scores
0
value 0.10342
scoring_system epss
scoring_elements 0.93323
published_at 2026-06-04T12:55:00Z
1
value 0.10342
scoring_system epss
scoring_elements 0.93334
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0036
2
reference_url https://curl.se/docs/CVE-2012-0036.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2012-0036.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0036
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0036
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=773457
reference_id 773457
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=773457
5
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
6
reference_url https://usn.ubuntu.com/1346-1/
reference_id USN-1346-1
reference_type
scores
url https://usn.ubuntu.com/1346-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
aliases CVE-2012-0036
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1yr3-4rvr-8kcv
1
url VCID-2u6v-6vm9-z3by
vulnerability_id VCID-2u6v-6vm9-z3by
summary The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3707.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3707
reference_id
reference_type
scores
0
value 0.00226
scoring_system epss
scoring_elements 0.4539
published_at 2026-06-04T12:55:00Z
1
value 0.00226
scoring_system epss
scoring_elements 0.45458
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3707
2
reference_url https://curl.se/docs/CVE-2014-3707.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3707.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3707
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3707
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1154941
reference_id 1154941
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1154941
5
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
6
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
7
reference_url https://usn.ubuntu.com/2399-1/
reference_id USN-2399-1
reference_type
scores
url https://usn.ubuntu.com/2399-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-3707
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2u6v-6vm9-z3by
2
url VCID-64mt-9155-tkbv
vulnerability_id VCID-64mt-9155-tkbv
summary The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3389.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3389
reference_id
reference_type
scores
0
value 0.03832
scoring_system epss
scoring_elements 0.88361
published_at 2026-06-04T12:55:00Z
1
value 0.03832
scoring_system epss
scoring_elements 0.88379
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3389
2
reference_url https://curl.se/docs/CVE-2011-3389.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2011-3389.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=737506
reference_id 737506
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=737506
6
reference_url https://security.gentoo.org/glsa/201111-02
reference_id GLSA-201111-02
reference_type
scores
url https://security.gentoo.org/glsa/201111-02
7
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
8
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
9
reference_url https://security.gentoo.org/glsa/201406-32
reference_id GLSA-201406-32
reference_type
scores
url https://security.gentoo.org/glsa/201406-32
10
reference_url https://access.redhat.com/errata/RHSA-2011:1380
reference_id RHSA-2011:1380
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1380
11
reference_url https://access.redhat.com/errata/RHSA-2011:1384
reference_id RHSA-2011:1384
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:1384
12
reference_url https://access.redhat.com/errata/RHSA-2012:0006
reference_id RHSA-2012:0006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0006
13
reference_url https://access.redhat.com/errata/RHSA-2012:0034
reference_id RHSA-2012:0034
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0034
14
reference_url https://access.redhat.com/errata/RHSA-2012:0343
reference_id RHSA-2012:0343
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0343
15
reference_url https://access.redhat.com/errata/RHSA-2012:0508
reference_id RHSA-2012:0508
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0508
16
reference_url https://access.redhat.com/errata/RHSA-2013:1455
reference_id RHSA-2013:1455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1455
17
reference_url https://usn.ubuntu.com/1263-1/
reference_id USN-1263-1
reference_type
scores
url https://usn.ubuntu.com/1263-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
aliases CVE-2011-3389
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-64mt-9155-tkbv
3
url VCID-8j6v-xbhy-7uc2
vulnerability_id VCID-8j6v-xbhy-7uc2
summary cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3143.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
reference_id
reference_type
scores
0
value 0.04659
scoring_system epss
scoring_elements 0.89499
published_at 2026-06-04T12:55:00Z
1
value 0.04659
scoring_system epss
scoring_elements 0.89517
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3143
2
reference_url https://curl.se/docs/CVE-2015-3143.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3143.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
reference_id 1213306
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213306
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
2
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3143
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8j6v-xbhy-7uc2
4
url VCID-cmcn-f8ws-q3h2
vulnerability_id VCID-cmcn-f8ws-q3h2
summary The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6422.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-6422
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48857
published_at 2026-06-04T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48919
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-6422
2
reference_url https://curl.se/docs/CVE-2013-6422.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-6422.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6422
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6422
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1037918
reference_id 1037918
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1037918
5
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
6
reference_url https://usn.ubuntu.com/2058-1/
reference_id USN-2058-1
reference_type
scores
url https://usn.ubuntu.com/2058-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-6422
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cmcn-f8ws-q3h2
5
url VCID-e4qf-7gqs-qyg3
vulnerability_id VCID-e4qf-7gqs-qyg3
summary cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0015.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
reference_id
reference_type
scores
0
value 0.01266
scoring_system epss
scoring_elements 0.79799
published_at 2026-06-04T12:55:00Z
1
value 0.01266
scoring_system epss
scoring_elements 0.79825
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0015
2
reference_url https://curl.se/docs/CVE-2014-0015.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0015.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
reference_id 1053903
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1053903
6
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
7
reference_url https://usn.ubuntu.com/2097-1/
reference_id USN-2097-1
reference_type
scores
url https://usn.ubuntu.com/2097-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0015
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e4qf-7gqs-qyg3
6
url VCID-f922-jx9w-mbc5
vulnerability_id VCID-f922-jx9w-mbc5
summary CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8150.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
reference_id
reference_type
scores
0
value 0.01225
scoring_system epss
scoring_elements 0.79462
published_at 2026-06-04T12:55:00Z
1
value 0.01225
scoring_system epss
scoring_elements 0.79489
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-8150
2
reference_url https://curl.se/docs/CVE-2014-8150.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-8150.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
reference_id 1178692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1178692
5
reference_url https://security.gentoo.org/glsa/201701-47
reference_id GLSA-201701-47
reference_type
scores
url https://security.gentoo.org/glsa/201701-47
6
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
7
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
8
reference_url https://usn.ubuntu.com/2474-1/
reference_id USN-2474-1
reference_type
scores
url https://usn.ubuntu.com/2474-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-8150
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f922-jx9w-mbc5
7
url VCID-hhu3-dp3m-gbgm
vulnerability_id VCID-hhu3-dp3m-gbgm
summary Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2174.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
reference_id
reference_type
scores
0
value 0.03181
scoring_system epss
scoring_elements 0.872
published_at 2026-06-04T12:55:00Z
1
value 0.03181
scoring_system epss
scoring_elements 0.87223
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2174
2
reference_url https://curl.se/docs/CVE-2013-2174.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-2174.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=965640
reference_id 965640
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=965640
5
reference_url https://security.gentoo.org/glsa/201401-14
reference_id GLSA-201401-14
reference_type
scores
url https://security.gentoo.org/glsa/201401-14
6
reference_url https://access.redhat.com/errata/RHSA-2013:0983
reference_id RHSA-2013:0983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0983
7
reference_url https://usn.ubuntu.com/1894-1/
reference_id USN-1894-1
reference_type
scores
url https://usn.ubuntu.com/1894-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-2174
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhu3-dp3m-gbgm
8
url VCID-nkmd-xb13-mbg9
vulnerability_id VCID-nkmd-xb13-mbg9
summary cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4545.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4545
reference_id
reference_type
scores
0
value 0.00358
scoring_system epss
scoring_elements 0.58306
published_at 2026-06-04T12:55:00Z
1
value 0.00358
scoring_system epss
scoring_elements 0.58353
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4545
2
reference_url https://curl.se/docs/CVE-2013-4545.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2013-4545.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1029159
reference_id 1029159
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1029159
5
reference_url https://usn.ubuntu.com/2048-1/
reference_id USN-2048-1
reference_type
scores
url https://usn.ubuntu.com/2048-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2013-4545
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nkmd-xb13-mbg9
9
url VCID-p9v4-nweu-vydg
vulnerability_id VCID-p9v4-nweu-vydg
summary cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3148.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
reference_id
reference_type
scores
0
value 0.01422
scoring_system epss
scoring_elements 0.80941
published_at 2026-06-04T12:55:00Z
1
value 0.01422
scoring_system epss
scoring_elements 0.8097
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3148
2
reference_url https://curl.se/docs/CVE-2015-3148.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2015-3148.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
reference_id 1213351
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1213351
6
reference_url https://security.gentoo.org/glsa/201509-02
reference_id GLSA-201509-02
reference_type
scores
url https://security.gentoo.org/glsa/201509-02
7
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
8
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
9
reference_url https://usn.ubuntu.com/2591-1/
reference_id USN-2591-1
reference_type
scores
url https://usn.ubuntu.com/2591-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
purl pkg:deb/debian/curl@7.38.0-4%2Bdeb8u11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4%252Bdeb8u11
2
url pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
purl pkg:deb/debian/curl@7.52.1-5%2Bdeb9u10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1kpz-55f1-f7dj
2
vulnerability VCID-1zsv-4jdy-63en
3
vulnerability VCID-3ws4-1sak-r3ck
4
vulnerability VCID-4hha-2z31-2bf8
5
vulnerability VCID-4zcd-rbx3-qye5
6
vulnerability VCID-5svr-3vv9-mqea
7
vulnerability VCID-5ujs-47hf-g7gj
8
vulnerability VCID-6745-tyba-33fa
9
vulnerability VCID-738z-myg9-37hr
10
vulnerability VCID-7jrx-ykk8-h3gp
11
vulnerability VCID-7yvu-s3p2-sfhc
12
vulnerability VCID-7z3h-9pk3-rqct
13
vulnerability VCID-a58z-fu87-9ybs
14
vulnerability VCID-azcz-b8f2-63be
15
vulnerability VCID-bb6v-z8yg-6fe3
16
vulnerability VCID-bx2m-n5ft-3be8
17
vulnerability VCID-cdzf-3ydt-8bdk
18
vulnerability VCID-cfry-nx5h-kudv
19
vulnerability VCID-cjyz-fdnv-b3g4
20
vulnerability VCID-dj48-3dkt-dbdh
21
vulnerability VCID-f7n8-zzhz-fuc8
22
vulnerability VCID-f8vu-23bb-5ue7
23
vulnerability VCID-fhc8-r8gv-bugj
24
vulnerability VCID-fp66-fzqt-6yg7
25
vulnerability VCID-g4n9-kg3s-pfcr
26
vulnerability VCID-gud1-yg9u-zyfp
27
vulnerability VCID-gueb-wzpx-ufb2
28
vulnerability VCID-h6xj-mys4-pucf
29
vulnerability VCID-j688-cyfg-p7gu
30
vulnerability VCID-jnq1-hk6d-b3a3
31
vulnerability VCID-kae8-wmf2-2kf1
32
vulnerability VCID-kkrm-dj79-4ucj
33
vulnerability VCID-kn6z-caj8-bbc9
34
vulnerability VCID-kq38-7s5x-nqaz
35
vulnerability VCID-mh96-gkf1-9uek
36
vulnerability VCID-msd2-35g9-nyd2
37
vulnerability VCID-naac-snjw-qbad
38
vulnerability VCID-p7mn-a632-c3ag
39
vulnerability VCID-p8vk-yf66-wbb7
40
vulnerability VCID-p97a-kjpp-f3d8
41
vulnerability VCID-q46r-7nct-s3bw
42
vulnerability VCID-q8tg-prj1-y7b8
43
vulnerability VCID-qrnc-7ywu-37cz
44
vulnerability VCID-r2g9-c896-rkge
45
vulnerability VCID-raxd-4nxj-gkhp
46
vulnerability VCID-razg-yr7y-ukgd
47
vulnerability VCID-rt5e-saz2-j7c9
48
vulnerability VCID-sf3g-v5kx-kkh4
49
vulnerability VCID-sutv-qt2x-2yc7
50
vulnerability VCID-swmn-7ns9-ekg1
51
vulnerability VCID-tcxd-z7f3-kkes
52
vulnerability VCID-td39-d3tf-vkhc
53
vulnerability VCID-tn33-re3r-yfhw
54
vulnerability VCID-tzs5-qzhn-rqbk
55
vulnerability VCID-ubnn-z97k-47gw
56
vulnerability VCID-uj78-2cgz-zbdb
57
vulnerability VCID-urgp-rqyc-sqer
58
vulnerability VCID-vpkr-9akj-hbf6
59
vulnerability VCID-w472-84ep-fkdx
60
vulnerability VCID-wbwx-5vg3-uqcd
61
vulnerability VCID-wmam-qmmg-6uay
62
vulnerability VCID-xc5k-47n9-43d6
63
vulnerability VCID-xgj8-zrta-kub9
64
vulnerability VCID-y41p-tgpa-m7cs
65
vulnerability VCID-yjtj-ydsg-u7ca
66
vulnerability VCID-zg98-v6dj-s7gv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.52.1-5%252Bdeb9u10
aliases CVE-2015-3148
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p9v4-nweu-vydg
10
url VCID-q9ht-ra39-kuef
vulnerability_id VCID-q9ht-ra39-kuef
summary The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0138.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
reference_id
reference_type
scores
0
value 0.00666
scoring_system epss
scoring_elements 0.7168
published_at 2026-06-05T12:55:00Z
1
value 0.00903
scoring_system epss
scoring_elements 0.76091
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0138
2
reference_url https://curl.se/docs/CVE-2014-0138.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0138.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
reference_id 1079148
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079148
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://access.redhat.com/errata/RHSA-2014:0561
reference_id RHSA-2014:0561
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0561
9
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0138
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9ht-ra39-kuef
11
url VCID-tyqp-e8cp-dbbm
vulnerability_id VCID-tyqp-e8cp-dbbm
summary cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0139.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
reference_id
reference_type
scores
0
value 0.01203
scoring_system epss
scoring_elements 0.79289
published_at 2026-06-05T12:55:00Z
1
value 0.01626
scoring_system epss
scoring_elements 0.82203
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0139
2
reference_url https://curl.se/docs/CVE-2014-0139.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-0139.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
reference_id 1079149
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1079149
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
reference_id 742728
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742728
7
reference_url https://security.gentoo.org/glsa/201406-21
reference_id GLSA-201406-21
reference_type
scores
url https://security.gentoo.org/glsa/201406-21
8
reference_url https://usn.ubuntu.com/2167-1/
reference_id USN-2167-1
reference_type
scores
url https://usn.ubuntu.com/2167-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-0139
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tyqp-e8cp-dbbm
12
url VCID-uh5a-zcds-3bcc
vulnerability_id VCID-uh5a-zcds-3bcc
summary cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3613.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
reference_id
reference_type
scores
0
value 0.0182
scoring_system epss
scoring_elements 0.83211
published_at 2026-06-04T12:55:00Z
1
value 0.0182
scoring_system epss
scoring_elements 0.83237
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3613
2
reference_url https://curl.se/docs/CVE-2014-3613.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2014-3613.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
reference_id 1136154
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1136154
5
reference_url https://access.redhat.com/errata/RHSA-2015:1254
reference_id RHSA-2015:1254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1254
6
reference_url https://access.redhat.com/errata/RHSA-2015:2159
reference_id RHSA-2015:2159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2159
7
reference_url https://usn.ubuntu.com/2346-1/
reference_id USN-2346-1
reference_type
scores
url https://usn.ubuntu.com/2346-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
1
url pkg:deb/debian/curl@7.38.0-4
purl pkg:deb/debian/curl@7.38.0-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-3s4s-6c3v-7kgn
6
vulnerability VCID-3ws4-1sak-r3ck
7
vulnerability VCID-4hha-2z31-2bf8
8
vulnerability VCID-4zcd-rbx3-qye5
9
vulnerability VCID-51ac-1jc2-vfed
10
vulnerability VCID-5m1h-d3cm-dqfu
11
vulnerability VCID-5sem-gndf-97e6
12
vulnerability VCID-5svr-3vv9-mqea
13
vulnerability VCID-5ujs-47hf-g7gj
14
vulnerability VCID-5xjw-u8ad-n3g5
15
vulnerability VCID-6745-tyba-33fa
16
vulnerability VCID-6rk4-vb5u-bkg6
17
vulnerability VCID-738z-myg9-37hr
18
vulnerability VCID-7jrx-ykk8-h3gp
19
vulnerability VCID-7yvu-s3p2-sfhc
20
vulnerability VCID-7z3h-9pk3-rqct
21
vulnerability VCID-8j6v-xbhy-7uc2
22
vulnerability VCID-9rvz-5w86-u7e5
23
vulnerability VCID-a58z-fu87-9ybs
24
vulnerability VCID-av4f-gxku-qbhp
25
vulnerability VCID-azcz-b8f2-63be
26
vulnerability VCID-bb6v-z8yg-6fe3
27
vulnerability VCID-bx2m-n5ft-3be8
28
vulnerability VCID-cdar-9qhw-hke7
29
vulnerability VCID-cdzf-3ydt-8bdk
30
vulnerability VCID-cfry-nx5h-kudv
31
vulnerability VCID-cjyz-fdnv-b3g4
32
vulnerability VCID-dj48-3dkt-dbdh
33
vulnerability VCID-dndt-tapy-23d2
34
vulnerability VCID-f276-amhj-9yfx
35
vulnerability VCID-f7n8-zzhz-fuc8
36
vulnerability VCID-f8vu-23bb-5ue7
37
vulnerability VCID-fhc8-r8gv-bugj
38
vulnerability VCID-fp66-fzqt-6yg7
39
vulnerability VCID-g4n9-kg3s-pfcr
40
vulnerability VCID-gud1-yg9u-zyfp
41
vulnerability VCID-gueb-wzpx-ufb2
42
vulnerability VCID-h6xj-mys4-pucf
43
vulnerability VCID-j688-cyfg-p7gu
44
vulnerability VCID-jnq1-hk6d-b3a3
45
vulnerability VCID-k79t-tesa-jfck
46
vulnerability VCID-kae8-wmf2-2kf1
47
vulnerability VCID-kkrm-dj79-4ucj
48
vulnerability VCID-kn6z-caj8-bbc9
49
vulnerability VCID-kq38-7s5x-nqaz
50
vulnerability VCID-mh96-gkf1-9uek
51
vulnerability VCID-mq44-5pmp-2qhh
52
vulnerability VCID-msd2-35g9-nyd2
53
vulnerability VCID-naac-snjw-qbad
54
vulnerability VCID-p7mn-a632-c3ag
55
vulnerability VCID-p8vk-yf66-wbb7
56
vulnerability VCID-p97a-kjpp-f3d8
57
vulnerability VCID-p9v4-nweu-vydg
58
vulnerability VCID-q46r-7nct-s3bw
59
vulnerability VCID-q8ja-keyk-fyfb
60
vulnerability VCID-q8tg-prj1-y7b8
61
vulnerability VCID-qe9z-wuze-tucq
62
vulnerability VCID-qrnc-7ywu-37cz
63
vulnerability VCID-r2g9-c896-rkge
64
vulnerability VCID-raxd-4nxj-gkhp
65
vulnerability VCID-razg-yr7y-ukgd
66
vulnerability VCID-rt5e-saz2-j7c9
67
vulnerability VCID-s2gu-8jpq-mub9
68
vulnerability VCID-s6gu-gm97-fyfk
69
vulnerability VCID-sesh-938m-x3f8
70
vulnerability VCID-sf3g-v5kx-kkh4
71
vulnerability VCID-snsg-c2up-b7cn
72
vulnerability VCID-sutv-qt2x-2yc7
73
vulnerability VCID-swmn-7ns9-ekg1
74
vulnerability VCID-tcxd-z7f3-kkes
75
vulnerability VCID-td39-d3tf-vkhc
76
vulnerability VCID-tn33-re3r-yfhw
77
vulnerability VCID-tzs5-qzhn-rqbk
78
vulnerability VCID-ubnn-z97k-47gw
79
vulnerability VCID-ugrr-z2zv-6qgp
80
vulnerability VCID-uj78-2cgz-zbdb
81
vulnerability VCID-urgp-rqyc-sqer
82
vulnerability VCID-vfc1-yy11-bycp
83
vulnerability VCID-vpkr-9akj-hbf6
84
vulnerability VCID-w472-84ep-fkdx
85
vulnerability VCID-w63e-dku9-mqe9
86
vulnerability VCID-wbwx-5vg3-uqcd
87
vulnerability VCID-wmam-qmmg-6uay
88
vulnerability VCID-xc5k-47n9-43d6
89
vulnerability VCID-xgj8-zrta-kub9
90
vulnerability VCID-xyze-msxs-1qem
91
vulnerability VCID-y41p-tgpa-m7cs
92
vulnerability VCID-yjtj-ydsg-u7ca
93
vulnerability VCID-zg98-v6dj-s7gv
94
vulnerability VCID-zqyj-7rr3-fqew
95
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.38.0-4
aliases CVE-2014-3613
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uh5a-zcds-3bcc
13
url VCID-wc29-pw8g-mkgj
vulnerability_id VCID-wc29-pw8g-mkgj
summary The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2192.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2192
reference_id
reference_type
scores
0
value 0.02049
scoring_system epss
scoring_elements 0.84184
published_at 2026-06-04T12:55:00Z
1
value 0.02049
scoring_system epss
scoring_elements 0.84208
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2192
2
reference_url https://curl.se/docs/CVE-2011-2192.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2011-2192.html
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631615
reference_id 631615
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631615
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=711454
reference_id 711454
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=711454
6
reference_url https://security.gentoo.org/glsa/201203-02
reference_id GLSA-201203-02
reference_type
scores
url https://security.gentoo.org/glsa/201203-02
7
reference_url https://access.redhat.com/errata/RHSA-2011:0918
reference_id RHSA-2011:0918
reference_type
scores
url https://access.redhat.com/errata/RHSA-2011:0918
8
reference_url https://usn.ubuntu.com/1158-1/
reference_id USN-1158-1
reference_type
scores
url https://usn.ubuntu.com/1158-1/
fixed_packages
0
url pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
purl pkg:deb/debian/curl@7.26.0-1%2Bwheezy13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1k-d4ez-ybdu
1
vulnerability VCID-1b5g-9trz-7ufb
2
vulnerability VCID-1kpz-55f1-f7dj
3
vulnerability VCID-1y6d-7vfu-ybb3
4
vulnerability VCID-1zsv-4jdy-63en
5
vulnerability VCID-2u6v-6vm9-z3by
6
vulnerability VCID-3s4s-6c3v-7kgn
7
vulnerability VCID-3ws4-1sak-r3ck
8
vulnerability VCID-4hha-2z31-2bf8
9
vulnerability VCID-4zcd-rbx3-qye5
10
vulnerability VCID-51ac-1jc2-vfed
11
vulnerability VCID-5m1h-d3cm-dqfu
12
vulnerability VCID-5sem-gndf-97e6
13
vulnerability VCID-5svr-3vv9-mqea
14
vulnerability VCID-5ujs-47hf-g7gj
15
vulnerability VCID-5xjw-u8ad-n3g5
16
vulnerability VCID-6745-tyba-33fa
17
vulnerability VCID-6rk4-vb5u-bkg6
18
vulnerability VCID-738z-myg9-37hr
19
vulnerability VCID-7jrx-ykk8-h3gp
20
vulnerability VCID-7yvu-s3p2-sfhc
21
vulnerability VCID-7z3h-9pk3-rqct
22
vulnerability VCID-8j6v-xbhy-7uc2
23
vulnerability VCID-9rvz-5w86-u7e5
24
vulnerability VCID-a58z-fu87-9ybs
25
vulnerability VCID-av4f-gxku-qbhp
26
vulnerability VCID-azcz-b8f2-63be
27
vulnerability VCID-b76g-cq2w-t3a3
28
vulnerability VCID-bb6v-z8yg-6fe3
29
vulnerability VCID-bx2m-n5ft-3be8
30
vulnerability VCID-cdar-9qhw-hke7
31
vulnerability VCID-cdzf-3ydt-8bdk
32
vulnerability VCID-cfry-nx5h-kudv
33
vulnerability VCID-cjyz-fdnv-b3g4
34
vulnerability VCID-cmcn-f8ws-q3h2
35
vulnerability VCID-dj48-3dkt-dbdh
36
vulnerability VCID-dndt-tapy-23d2
37
vulnerability VCID-e4qf-7gqs-qyg3
38
vulnerability VCID-f276-amhj-9yfx
39
vulnerability VCID-f7n8-zzhz-fuc8
40
vulnerability VCID-f8vu-23bb-5ue7
41
vulnerability VCID-f922-jx9w-mbc5
42
vulnerability VCID-fhc8-r8gv-bugj
43
vulnerability VCID-fp66-fzqt-6yg7
44
vulnerability VCID-g4n9-kg3s-pfcr
45
vulnerability VCID-g72q-eedp-aufb
46
vulnerability VCID-gnur-763x-qkcu
47
vulnerability VCID-gud1-yg9u-zyfp
48
vulnerability VCID-gueb-wzpx-ufb2
49
vulnerability VCID-h6xj-mys4-pucf
50
vulnerability VCID-hhu3-dp3m-gbgm
51
vulnerability VCID-j688-cyfg-p7gu
52
vulnerability VCID-jnq1-hk6d-b3a3
53
vulnerability VCID-k79t-tesa-jfck
54
vulnerability VCID-kae8-wmf2-2kf1
55
vulnerability VCID-kkrm-dj79-4ucj
56
vulnerability VCID-kn6z-caj8-bbc9
57
vulnerability VCID-kq38-7s5x-nqaz
58
vulnerability VCID-mh96-gkf1-9uek
59
vulnerability VCID-mq44-5pmp-2qhh
60
vulnerability VCID-msd2-35g9-nyd2
61
vulnerability VCID-naac-snjw-qbad
62
vulnerability VCID-nkmd-xb13-mbg9
63
vulnerability VCID-p7mn-a632-c3ag
64
vulnerability VCID-p8vk-yf66-wbb7
65
vulnerability VCID-p97a-kjpp-f3d8
66
vulnerability VCID-p9v4-nweu-vydg
67
vulnerability VCID-q46r-7nct-s3bw
68
vulnerability VCID-q8ja-keyk-fyfb
69
vulnerability VCID-q8tg-prj1-y7b8
70
vulnerability VCID-q9ht-ra39-kuef
71
vulnerability VCID-qe9z-wuze-tucq
72
vulnerability VCID-qrnc-7ywu-37cz
73
vulnerability VCID-r2g9-c896-rkge
74
vulnerability VCID-raxd-4nxj-gkhp
75
vulnerability VCID-razg-yr7y-ukgd
76
vulnerability VCID-rt5e-saz2-j7c9
77
vulnerability VCID-s2gu-8jpq-mub9
78
vulnerability VCID-s6gu-gm97-fyfk
79
vulnerability VCID-sesh-938m-x3f8
80
vulnerability VCID-sf3g-v5kx-kkh4
81
vulnerability VCID-snsg-c2up-b7cn
82
vulnerability VCID-sutv-qt2x-2yc7
83
vulnerability VCID-swmn-7ns9-ekg1
84
vulnerability VCID-tcxd-z7f3-kkes
85
vulnerability VCID-td39-d3tf-vkhc
86
vulnerability VCID-tn33-re3r-yfhw
87
vulnerability VCID-tyqp-e8cp-dbbm
88
vulnerability VCID-tzs5-qzhn-rqbk
89
vulnerability VCID-ubnn-z97k-47gw
90
vulnerability VCID-ugrr-z2zv-6qgp
91
vulnerability VCID-uh5a-zcds-3bcc
92
vulnerability VCID-uj78-2cgz-zbdb
93
vulnerability VCID-urgp-rqyc-sqer
94
vulnerability VCID-vfc1-yy11-bycp
95
vulnerability VCID-vpkr-9akj-hbf6
96
vulnerability VCID-w472-84ep-fkdx
97
vulnerability VCID-w63e-dku9-mqe9
98
vulnerability VCID-wbwx-5vg3-uqcd
99
vulnerability VCID-wmam-qmmg-6uay
100
vulnerability VCID-xc5k-47n9-43d6
101
vulnerability VCID-xgj8-zrta-kub9
102
vulnerability VCID-xyze-msxs-1qem
103
vulnerability VCID-y41p-tgpa-m7cs
104
vulnerability VCID-yjtj-ydsg-u7ca
105
vulnerability VCID-zg98-v6dj-s7gv
106
vulnerability VCID-zqyj-7rr3-fqew
107
vulnerability VCID-zv25-wupq-bqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13
aliases CVE-2011-2192
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wc29-pw8g-mkgj
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/curl@7.26.0-1%252Bwheezy13