This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-8231 →

DEBIAN-CVE-2020-8231

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.72.0-1"}]}]

Debian:13 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.72.0-1"}]}]

Debian:14 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.72.0-1"}]}]