CVE-2020-8177
HighAdvisory
Published 24 Jun 2020In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.013
- 68th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 341
- of 17,781 indexed, latest versions
- Container images
- 265
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security and bug fix update
Carried by container images the latest versions of 341 of 17,781 indexed charts deploy, on 265 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+25 more | 7.35.0-1ubuntu2.20+esm4, 7.47.0-1ubuntu2.15, 7.52.1-5+deb9u11, 7.58.0-2ubuntu3.9 | 137 |
| curlapk | 7.63.0-r0, 7.64.0-r1, 7.64.0-r2, 7.64.0-r3+4 more | 7.64.0-r4, 7.66.0-r1, 7.67.0-r1, 7.69.1-r1 | 96 |
| curlrpm | 7.29.0-51.el7, 7.29.0-51.el7_6.3, 7.29.0-54.el7, 7.29.0-54.el7_7.2+7 more | 0:7.29.0-59.el7_9.1, 0:7.61.1-14.el8, 7.60.0-lp151.5.12.1 | 32 |
- OSV records
- ALPINE-CVE-2020-8177UBUNTU-CVE-2020-8177RHSA-2020:4599RHSA-2020:5002DLA-2295-1openSUSE-SU-2020:0908-1
- Also known as
- RHSA-2020:5417, USN-4402-1
Charts affected
341 by stars
Container images carrying it
265 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| chetangautamm/ | b4b94155ff5a | curl | 7.35.0-1ubuntu2.20+esm4 | 1 |
| cheyang/ | 46cc34755493 | curl | 7.47.0-1ubuntu2.15 | 1 |
| codaprotocol/ | 4ba4dd3a041f | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | 9cfeeb6c7c20 | curl | 7.69.1-r1 | 1 |
| conduction/ | c36094a41369 | curl | 7.69.1-r1 | 1 |
| conduction/ | 07c44005da9d | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | ece1ab544c57 | curl | 7.69.1-r1 | 1 |
| conduction/ | 25415534d245 | curl | 7.67.0-r1 | 1 |
| conduction/ | e154d5781c8a | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | 3423845692c1 | curl | 7.69.1-r1 | 1 |
| conduction/ | ef3a3fb0ad47 | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | 2744565516e8 | curl | 7.69.1-r1 | 1 |
| conduction/ | 5f5add2c12e0 | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | e1d4ad1e22a8 | curl | 7.69.1-r1 | 1 |
| conduction/ | e3546b97faea | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | b6f95c8ead7d | curl | 7.69.1-r1 | 1 |
| conduction/ | 45f20c4cd2fa | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | 8f177f9f8a7b | curl | 7.69.1-r1 | 1 |
| conduction/ | 8722700f1768 | curl | 7.52.1-5+deb9u11 | 1 |
| conduction/ | 24f03c57568f | curl | 7.69.1-r1 | 1 |
| conduction/ | c3e5737ae68f | curl | 7.52.1-5+deb9u11 | 1 |
| ctron/ | 8fdea8f76499 | curl | 0:7.61.1-14.el8 | 1 |
| daskdev/ | 4ecd7bc35500 | curl | 7.52.1-5+deb9u11 | 1 |
| daskdev/ | 052630f5ca04 | curl | 7.58.0-2ubuntu3.9 | 1 |
| datadog/ | 17f08a860090 | curl | 0:7.29.0-59.el7_9.1 | 1 |
| datalust/ | 9c731bb207a6 | curl | 7.47.0-1ubuntu2.15 | 1 |
| davidvmar/ | 2a68e9ac7f09 | curl | 7.52.1-5+deb9u11 | 1 |
| davidvmar/ | 5663f5b24615 | curl | 7.52.1-5+deb9u11 | 1 |
| dbanda/ | 0ca125e68e53 | curl | 7.64.0-r4 | 1 |
| devspacecloud/ | 9ccfe38b31b5 | curl | 7.67.0-r1 | 1 |
| devspacecloud/ | 49c397413f7b | curl | 7.67.0-r1 | 1 |
| dniel/ | 45a667852f2a | curl | 7.58.0-2ubuntu3.9 | 1 |
| dstacademy/ | 46487aa079b0 | curl | 7.52.1-5+deb9u11 | 1 |
| egdsandaru/ | 681baa1926f4 | curl | 7.52.1-5+deb9u11 | 1 |
| erlangsolutions/ | ad603bcb0b03 | curl | 7.52.1-5+deb9u11 | 1 |
| erlio/ | dcdaf720107c | curl | 7.52.1-5+deb9u11 | 1 |
| ethereumex/ | a7603aa8df4c | curl | 7.47.0-1ubuntu2.15 | 1 |
| folioci/ | 1b57d690d568 | curl | 7.66.0-r1 | 1 |
| free5gmano/ | 36f806935519 | curl | 7.47.0-1ubuntu2.15 | 1 |
| galaxy/ | 0267bad550e6 | curl | 7.35.0-1ubuntu2.20+esm4 | 1 |
| galaxy/ | 8e577a626dfd | curl | 7.35.0-1ubuntu2.20+esm4 | 1 |
| gitea/ | 85416d6f65fe | curl | 7.67.0-r1 | 1 |
| gitlab/ | a83c15bda342 | curl | 7.64.0-r4 | 1 |
| gitlab/ | fd7e5dfb9f30 | curl | 7.69.1-r1 | 1 |
| gocd/ | 53588bd3221f | curl | 7.64.0-r4 | 1 |
| gocd/ | 2da45cb09d57 | curl | 7.64.0-r4 | 1 |
| gogs/ | 0195b095d0b2 | curl | 7.67.0-r1 | 1 |
| gogs/ | 420d53bb7277 | curl | 7.67.0-r1 | 1 |
| golenski/ | 48cfd60b8413 | curl | 7.69.1-r1 | 1 |
| gomods/ | d714c7ff0231 | curl | 7.67.0-r1 | 1 |