CVE-2016-8625

Medium

Description

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

SeverityMedium

CVSS5.3

Exploit probability—

ProductHaxx Curl

PublishedAug 1, 2018

First seenAug 1, 2018

Weakness typeCWE-20Improper input validation

How to fix

Update

haxx curl7.51.0 or later

Vendor advisories

access.redhat.com/errata/RHSA-2018:3558
access.redhat.com/errata/RHSA-2018:2486
security.gentoo.org/glsa/201701-47

Affected products

Product	Affected versions	Fixed in
haxx curl	v < 7.51.0	7.51.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.