CVE-2020-8169
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Published Dec 14, 2020 · updated Oct 14, 2026 · haxx curl
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2020 · NIST NVD
Detected
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Oct 14, 2026 · NIST NVD
Updated
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Affected
- cpe debian/debian linux10.0
- cpe haxx/curlversion unspecified
- cpe siemens/simatic tim 1531 irc firmwareversion unspecified
- cpe siemens/sinec infrastructure network servicesversion unspecified
- cpe splunk/universal forwarderversion unspecified
- cpe splunk/universal forwarder9.1.0
Sources
- CVE.orgCVE-2020-8169
Official CVE identifier
cve.org - NIST NVDCVE-2020-8169
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
nvd.nist.gov