CVE-2016-8625
HIGH7.5EPSS 1.7%發布日:2018/8/1修改日:2026/4/28
描述
curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
受影響套件(2)
- Alpine/curlfrom 0, < 7.51.0-r0
- Debian/curlfrom 0, < 7.51.0-1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |