{"id":"CVE-2016-8625","aliases":["ALPINE-CVE-2016-8625","BELL-CVE-2016-8625","CURL-CVE-2016-8625","DEBIAN-CVE-2016-8625","EUVD-2016-9470","GHSA-33h3-8669-hjwx","RHSA-2018:3558","UBUNTU-CVE-2016-8625","openSUSE-SU-2024:10303-1"],"status":"published","title":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.04321,"percentile":0.9123,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2016-11-02T08:00:00Z","modified":"2026-10-25T01:05:29Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"curl","fixed_in":["7.51.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"curl","fixed_in":["7.51.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"curl","fixed_in":["7.51.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"curl","fixed_in":["7.51.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"curl","fixed_in":["7.51.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"curl","fixed_in":["7.51.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["7.51.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["7.51.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15","7.35.0-1ubuntu2.16","7.35.0-1ubuntu2.17","7.35.0-1ubuntu2.19","7.35.0-1ubuntu2.20","7.35.0-1ubuntu2.20+esm2","7.35.0-1ubuntu2.20+esm3","7.35.0-1ubuntu2.20+esm4","7.35.0-1ubuntu2.20+esm5","7.35.0-1ubuntu2.20+esm6","7.35.0-1ubuntu2.20+esm7","7.35.0-1ubuntu2.20+esm8","7.35.0-1ubuntu2.20+esm9","7.35.0-1ubuntu2.20+esm10","7.35.0-1ubuntu2.20+esm11","7.35.0-1ubuntu2.20+esm12","7.35.0-1ubuntu2.20+esm13","7.35.0-1ubuntu2.20+esm14","7.35.0-1ubuntu2.20+esm15","7.35.0-1ubuntu2.20+esm16","7.35.0-1ubuntu2.20+esm17","7.35.0-1ubuntu2.20+esm18","7.35.0-1ubuntu2.20+esm19","7.35.0-1ubuntu2.20+esm20","7.35.0-1ubuntu2.20+esm21","7.35.0-1ubuntu2.20+esm22","7.35.0-1ubuntu2.20+esm23","7.35.0-1ubuntu2.20+esm24"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13","7.47.0-1ubuntu2.14","7.47.0-1ubuntu2.15","7.47.0-1ubuntu2.16","7.47.0-1ubuntu2.18","7.47.0-1ubuntu2.19","7.47.0-1ubuntu2.19+esm1","7.47.0-1ubuntu2.19+esm2","7.47.0-1ubuntu2.19+esm3","7.47.0-1ubuntu2.19+esm4","7.47.0-1ubuntu2.19+esm5","7.47.0-1ubuntu2.19+esm6","7.47.0-1ubuntu2.19+esm7","7.47.0-1ubuntu2.19+esm8","7.47.0-1ubuntu2.19+esm9","7.47.0-1ubuntu2.19+esm10","7.47.0-1ubuntu2.19+esm11","7.47.0-1ubuntu2.19+esm12","7.47.0-1ubuntu2.19+esm13","7.47.0-1ubuntu2.19+esm15","7.47.0-1ubuntu2.19+esm16","7.47.0-1ubuntu2.19+esm17","7.47.0-1ubuntu2.19+esm18","7.47.0-1ubuntu2.19+esm20","7.47.0-1ubuntu2.19+esm21"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.51.0-1.1"}]}],"bundled":32}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"haxx","product":"curl"},{"vendor":"the curl project","product":"curl"}],"references":[{"url":"http://www.securityfocus.com/bid/94107","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://curl.haxx.se/CVE-2016-8625.patch","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3558","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102K.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","article","report"]},{"url":"http://www.securitytracker.com/id/1037192","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8625","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2486","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-47","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8625","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-33h3-8669-hjwx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-8625","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-8625","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-8625","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.2_release_notes/chap-rhscl#sect-RHSCL-Changes-httpd","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1558450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1575536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1605048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1634830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648928","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3558.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5419","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5420","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5421","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803C.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7141","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160907.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7167","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160914.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8615","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8616","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8617","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8617","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102C.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8618","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102D.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8619","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102E.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8620","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102F.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8621","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102G.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8622","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102H.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8623","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102I.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8624","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102J.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8625","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9586","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161221A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7407","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170403.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8816","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2017-12e7.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8817","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2017-ae72.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15710","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15715","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000100","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170809B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000101","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170809A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000254","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20171004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000257","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000257","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20171023.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1283","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1312","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1333","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1333","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11763","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14618","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/CVE-2018-14618.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000007","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000007","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-b3bf.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000120","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-9cd6.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000121","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-97a2.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000122","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-b047.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000301","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-b138.html","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2016-8625","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8625","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:00:00Z","modified":"2024-08-06T02:27:41.183Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:32.724067Z"}],"euvd":[{"id":"EUVD-2016-9470","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:00:00Z","modified":"2024-08-06T02:27:41Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T02:22:30.087949Z"}],"ghsa":[{"id":"GHSA-33h3-8669-hjwx","title":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2022-05-13T01:09:03Z","modified":"2023-02-01T05:03:18Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:02.739665Z"}],"nvd":[{"id":"CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:29:00.49Z","modified":"2026-06-17T00:54:38.003Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:39.621168Z"}],"osv":[{"id":"ALPINE-CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:29:00.49Z","modified":"2026-09-22T06:17:50.246901969Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2016-8625","title":"CVE-2016-8625 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:04.856899Z","modified":"2026-01-26T09:46:02.293065Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:29:00.49Z","modified":"2026-10-24T10:31:00.659827354Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"DEBIAN-CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:29:00.49Z","modified":"2026-09-22T07:02:01.461294999Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"RHSA-2018:3558","title":"Red Hat Security Advisory: httpd24 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:54:33Z","modified":"2026-09-21T10:02:03Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.","status":"published","published":"2018-08-01T06:29:00Z","modified":"2026-10-17T12:52:44.659562208Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"CURL-CVE-2016-8625","title":"IDNA 2003 makes curl use wrong host","description":"When curl is built with libidn to handle International Domain Names (IDNA), it\ntranslates them to puny code for DNS resolving using the IDNA 2003 standard,\nwhile IDNA 2008 is the modern and up-to-date IDNA standard.\n\nThis misalignment causes problems with for example domains using the German ß\ncharacter (known as the Unicode Character `LATIN SMALL LETTER SHARP S`) which\nis used at times in the `.de` TLD and is translated differently in the two\nIDNA standards, leading to users potentially and unknowingly issuing network\ntransfer requests to the wrong host.\n\nFor example, `straße.de` is translated into `strasse.de` using IDNA 2003 but\nis translated into `xn--strae-oqa.de` using IDNA 2008. Needless to say, those\nhostnames could well resolve to different addresses and be two completely\nindependent servers. IDNA 2008 is mandatory for `.de` domains.\n\ncurl is not alone with this problem, as there is currently a big flux in the\nworld of network user-agents about which IDNA version to support and use.\n\nThis name problem exists for DNS-using protocols in curl, but only when built\nto use libidn.","status":"published","published":"2016-11-02T08:00:00Z","modified":"2026-10-25T01:05:29.386460535Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"openSUSE-SU-2024:10303-1","title":"curl-7.51.0-1.1 on GA media","description":"These are all security issues fixed in the curl-7.51.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:23.860668Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}