CVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Published Dec 14, 2020 · updated Oct 14, 2026 · haxx libcurl
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2020 · NIST NVD
Detected
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Oct 14, 2026 · NIST NVD
Updated
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Affected
- cpe apple/mac os xversion unspecified
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora32
- cpe fedoraproject/fedora33
- cpe haxx/libcurlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/hci management nodeversion unspecified
- cpe netapp/hci storage node firmwareversion unspecified
- cpe netapp/solidfireversion unspecified
- cpe oracle/communications billing and revenue management12.0.0.3.0
Sources
- CVE.orgCVE-2020-8285
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-8285
30-day exploitation probability 9.8%
first.org - NIST NVDCVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
nvd.nist.gov