CVE-2016-8625

curl: IDNA 2003 makes curl use wrong host

Published Aug 1, 2018 CVSS 3.0 · 5.3 Medium EPSS 4.3% KEV · Not listed
Description
curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-9470 curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 2:27 AM
Reserved
Oct 12, 2016, 12:00 AM
Status
Modified
Published
Aug 1, 2018, 6:29 AM
Modified
Jun 17, 2026, 12:54 AM
Severity
Moderate
Public date
Nov 2, 2016, 12:00 AM