High · published December 15, 2020
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
| Product | Versions | Fixed in |
|---|---|---|
| haxx/libcurl | ≥ 7.21.0, < 7.74.0 | 7.74.0 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/hci_management_node | all versions | — |
| netapp/solidfire | all versions | — |
| netapp/hci_bootstrap_os | all versions | — |
| netapp/hci_storage_node_firmware | all versions | — |
| apple/mac_os_x | < 10.14.6 | 10.14.6 |
| apple/mac_os_x | ≥ 10.15, < 10.15.7 | 10.15.7 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.0, < 11.3 | 11.3 |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_cloud_native_core_policy | all versions | — |
| oracle/essbase | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| fujitsu/m10-1_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-4_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-4s_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-1_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-2_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-2s_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-1_firmware | < xcp3110 | xcp3110 |
| fujitsu/m10-4_firmware | < xcp3110 | xcp3110 |
| fujitsu/m10-4s_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-1_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-2_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-2s_firmware | < xcp3110 | xcp3110 |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| splunk/universal_forwarder | ≥ 8.2.0, < 8.2.12 | 8.2.12 |
| splunk/universal_forwarder | ≥ 9.0.0, < 9.0.6 | 9.0.6 |
| splunk/universal_forwarder | all versions | — |