ALPINE-CVE-2020-8177
ALPINE-CVE-2020-8177
This page contains facts from public vulnerability sources. Check the original advisory before updating.
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
curl Alpine:v3.10
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.66.0-r1
Update to 7.66.0-r1
curl Alpine:v3.11
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.67.0-r1
Update to 7.67.0-r1
curl Alpine:v3.12
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.69.1-r1
Update to 7.69.1-r1
curl Alpine:v3.13
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.14
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.15
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.16
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.17
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.18
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.19
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.20
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.71.0-r0
Update to 7.71.0-r0
curl Alpine:v3.9
- Affected ranges
- ECOSYSTEM: ≥ 7.20.0, < 7.64.0-r4
Update to 7.64.0-r4