VYPR
High severity7.5NVD Advisory· Published Dec 14, 2020· Updated Apr 16, 2026

CVE-2020-8285

CVE-2020-8285

Description

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

Affected products

40
  • cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*
    Range: >=7.21.0,<7.74.0
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:hci_storage_node_firmware:-:*:*:*:*:*:*:*
  • Apple Inc./Mac Os X16 versions
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: <10.14.6
    • cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
    Range: >=11.0,<11.3
  • cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
  • cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*
    Range: <xcp2410
  • cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
    Range: <1.0.1.1
  • cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*range: >=8.2.0,<8.2.12
    • cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*

Patches

1
e052859759b3

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

20

News mentions

0

No linked articles in our index yet.