Findings

CVE-2020-8169

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

Published Dec 14, 2020 · updated Oct 14, 2026 · haxx curl

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

Timeline

Detection, updates, and resolution for this record.

  1. Dec 14, 2020 · NIST NVD

    Detected

    curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

  2. Oct 14, 2026 · NIST NVD

    Updated

    curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

Affected

  • cpe debian/debian linux10.0
  • cpe haxx/curlversion unspecified
  • cpe siemens/simatic tim 1531 irc firmwareversion unspecified
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe splunk/universal forwarderversion unspecified
  • cpe splunk/universal forwarder9.1.0

Sources

  • CVE.orgCVE-2020-8169

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-8169

    curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

    nvd.nist.gov

References