CVE-2016-8625 MEDIUM

CVE-2016-8625

Vendor The Curl Project
Product curl
Weakness CWE-20 · Input validation
Published August 1, 2018
Last update August 6, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

Key dates

02Disclosure timeline

August 1, 2018 CVE published
August 6, 2024 Record updated