{"schemaVersion":3,"id":"USN-4402-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"curl vulnerabilities\n\nMarek Szlagor, Gregory Jefferis and Jeroen Ooms discovered\nthat curl incorrectly handled certain credentials. An attacker\ncould possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS.\n(CVE-2020-8169)\n\nIt was discovered that curl incorrectly handled certain parameters.\nAn attacker could possibly use this issue to overwrite a local file.\n(CVE-2020-8177)","dates":{"published":"2020-06-24T11:51:31.000Z","modified":"2026-06-29T13:48:03.504Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"curl","name":"curl","label":"curl","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/curl","purlType":"deb","versions":[{"text":"< 7.35.0-1ubuntu2.20+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 7.47.0-1ubuntu2.15","noFixRecorded":false,"fixedIn":null},{"text":"< 7.58.0-2ubuntu3.9","noFixRecorded":false,"fixedIn":null},{"text":"< 7.68.0-1ubuntu2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.35.0-1ubuntu2.20+esm4 | < 7.47.0-1ubuntu2.15 | < 7.58.0-2ubuntu3.9 | < 7.68.0-1ubuntu2.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4402-1","label":"ubuntu.com/security/notices/USN-4402-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8169","label":"ubuntu.com/security/CVE-2020-8169","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-8177","label":"ubuntu.com/security/CVE-2020-8177","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-8169","CVE-2020-8177"],"downstream":[],"duplicates":[],"related":["CVE-2020-8169","CVE-2020-8177"]},"timeline":[{"kind":"published","date":"2020-06-24T11:51:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:48:03.504Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T14:00:19.828Z","stale":false,"partial":false}}