UBUNTU-CVE-2016-8625

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-8625

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-8625.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-8625

Related

CVE-2016-8625

Published

2018-08-01T06:29:00Z

Modified

2025-06-02T17:08:36Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

References

Affected packages

Ubuntu:Pro:14.04:LTS / curl

Package

Name: curl
Purl: pkg:deb/ubuntu/curl@7.35.0-1ubuntu2.20+esm18?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.32.0-1ubuntu1

7.33.0-1ubuntu1

7.34.0-1ubuntu1

7.35.0-1ubuntu1

7.35.0-1ubuntu2

7.35.0-1ubuntu2.1

7.35.0-1ubuntu2.2

7.35.0-1ubuntu2.3

7.35.0-1ubuntu2.5

7.35.0-1ubuntu2.6

7.35.0-1ubuntu2.7

7.35.0-1ubuntu2.8

7.35.0-1ubuntu2.9

7.35.0-1ubuntu2.10

7.35.0-1ubuntu2.11

7.35.0-1ubuntu2.12

7.35.0-1ubuntu2.13

7.35.0-1ubuntu2.14

7.35.0-1ubuntu2.15

7.35.0-1ubuntu2.16

7.35.0-1ubuntu2.17

7.35.0-1ubuntu2.19

7.35.0-1ubuntu2.20

7.35.0-1ubuntu2.20+esm3

7.35.0-1ubuntu2.20+esm4

7.35.0-1ubuntu2.20+esm5

7.35.0-1ubuntu2.20+esm6

7.35.0-1ubuntu2.20+esm7

7.35.0-1ubuntu2.20+esm8

7.35.0-1ubuntu2.20+esm9

7.35.0-1ubuntu2.20+esm10

7.35.0-1ubuntu2.20+esm11

7.35.0-1ubuntu2.20+esm12

7.35.0-1ubuntu2.20+esm13

7.35.0-1ubuntu2.20+esm14

7.35.0-1ubuntu2.20+esm15

7.35.0-1ubuntu2.20+esm16

7.35.0-1ubuntu2.20+esm17

7.35.0-1ubuntu2.20+esm18

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:Pro:16.04:LTS / curl

Package

Name: curl
Purl: pkg:deb/ubuntu/curl@7.47.0-1ubuntu2.19+esm13?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.43.0-1ubuntu2

7.45.0-1ubuntu1

7.46.0-1ubuntu1

7.47.0-1ubuntu1

7.47.0-1ubuntu2

7.47.0-1ubuntu2.1

7.47.0-1ubuntu2.2

7.47.0-1ubuntu2.3

7.47.0-1ubuntu2.4

7.47.0-1ubuntu2.5

7.47.0-1ubuntu2.6

7.47.0-1ubuntu2.7

7.47.0-1ubuntu2.8

7.47.0-1ubuntu2.9

7.47.0-1ubuntu2.11

7.47.0-1ubuntu2.12

7.47.0-1ubuntu2.13

7.47.0-1ubuntu2.14

7.47.0-1ubuntu2.15

7.47.0-1ubuntu2.16

7.47.0-1ubuntu2.18

7.47.0-1ubuntu2.19

7.47.0-1ubuntu2.19+esm1

7.47.0-1ubuntu2.19+esm2

7.47.0-1ubuntu2.19+esm3

7.47.0-1ubuntu2.19+esm4

7.47.0-1ubuntu2.19+esm5

7.47.0-1ubuntu2.19+esm6

7.47.0-1ubuntu2.19+esm7

7.47.0-1ubuntu2.19+esm8

7.47.0-1ubuntu2.19+esm9

7.47.0-1ubuntu2.19+esm10

7.47.0-1ubuntu2.19+esm11

7.47.0-1ubuntu2.19+esm12

7.47.0-1ubuntu2.19+esm13

Ecosystem specific

{
    "ubuntu_priority": "low"
}

Ubuntu:18.04:LTS / curl

Package

Name: curl
Purl: pkg:deb/ubuntu/curl@7.55.1-1ubuntu2.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.55.1-1ubuntu2.1

Affected versions

7.*

7.55.1-1ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "low",
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "curl",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "curl-dbgsym",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3-dbgsym",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3-gnutls",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3-gnutls-dbgsym",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3-nss",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl3-nss-dbgsym",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl4-doc",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl4-gnutls-dev",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl4-nss-dev",
            "binary_version": "7.55.1-1ubuntu2.1"
        },
        {
            "binary_name": "libcurl4-openssl-dev",
            "binary_version": "7.55.1-1ubuntu2.1"
        }
    ]
}