High · published December 15, 2020
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
| Product | Versions | Fixed in |
|---|---|---|
| haxx/libcurl | ≥ 7.41.0, < 7.74.0 | 7.74.0 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| netapp/clustered_data_ontap | all versions | — |
| netapp/hci_management_node | all versions | — |
| netapp/solidfire | all versions | — |
| netapp/hci_bootstrap_os | all versions | — |
| netapp/hci_storage_node_firmware | all versions | — |
| apple/mac_os_x | < 10.14.6 | 10.14.6 |
| apple/mac_os_x | ≥ 10.15, < 10.15.7 | 10.15.7 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | ≥ 11.0, < 11.3 | 11.3 |
| siemens/simatic_tim_1531_irc_firmware | ≤ 2.2 | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_cloud_native_core_policy | all versions | — |
| oracle/essbase | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| splunk/universal_forwarder | ≥ 8.2.0, < 8.2.12 | 8.2.12 |
| splunk/universal_forwarder | ≥ 9.0.0, < 9.0.6 | 9.0.6 |
| splunk/universal_forwarder | all versions | — |