CVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Published Dec 14, 2020 · updated Oct 14, 2026 · haxx libcurl
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2020 · NIST NVD
Detected
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Oct 14, 2026 · NIST NVD
Updated
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Affected
- cpe apple/mac os xversion unspecified
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora32
- cpe fedoraproject/fedora33
- cpe haxx/libcurlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/hci management nodeversion unspecified
- cpe netapp/hci storage node firmwareversion unspecified
- cpe netapp/solidfireversion unspecified
- cpe siemens/simatic tim 1531 irc firmwareversion unspecified
Sources
- CVE.orgCVE-2020-8286
Official CVE identifier
cve.org - NIST NVDCVE-2020-8286
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
nvd.nist.gov