High · published December 15, 2020
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
| Product | Versions | Fixed in |
|---|---|---|
| haxx/curl | ≥ 7.62.0, ≤ 7.70.0 | — |
| siemens/simatic_tim_1531_irc_firmware | < 2.2 | 2.2 |
| debian/debian_linux | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| splunk/universal_forwarder | ≥ 8.2.0, < 8.2.12 | 8.2.12 |
| splunk/universal_forwarder | ≥ 9.0.0, < 9.0.6 | 9.0.6 |
| splunk/universal_forwarder | all versions | — |