Dashboard / CVE-2020-8231

CVE-2020-8231

HIGH
MEDIUM Priority: 0.40 BB Relevance: 76/100
Published: 2020-12-14 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
debian debian_linux 10.0
haxx libcurl 7.29.0 – 7.71.1
n/a https://github.com/curl/curl libcurl 7.29.0 to and including 7.71.1
oracle communications_cloud_native_core_policy 1.14.0
siemens sinec_infrastructure_network_services < 1.0.1.1
splunk universal_forwarder 8.2.0 – 8.2.12
splunk universal_forwarder 9.1.0

References & Advisories (10)

https://hackerone.com/reports/948876
Exploit Issue Tracking Patch

Bug Bounty Relevance

76 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

5.34%
Raw Score 0.053440
Percentile 92.7%
Date 2026-11-04

EPSS Trend

2026-11-04
0.05344
2026-11-03
0.05344
2026-11-02
0.05344

Intelligence Sources

mitre ref →
nvd ref →

External Links