{"affected":[{"product":"https://github.com/curl/curl","source":"CNA: hackerone","vendor":"n/a","versions":[{"status":"affected","version":"libcurl 7.29.0 to and including 7.71.1"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"cveId":"CVE-2020-8231","cwes":["CWE-416"],"description":"Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.","epss":{"date":"2026-11-02","percentile":0.92631,"score":0.05344},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793642226989,"publishedAt":1607974759000,"references":[{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://hackerone.com/reports/948876"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://curl.haxx.se/docs/CVE-2020-8231.html"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/202012-14"},{"source":"CNA: hackerone","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"https://www.debian.org/security/2021/dsa-4881"},{"source":"CNA: hackerone","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"CNA: hackerone","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"CNA: hackerone","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"CNA: hackerone","tags":["x_refsource_CONFIRM"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://hackerone.com/reports/948876"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://curl.haxx.se/docs/CVE-2020-8231.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/202012-14"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"https://www.debian.org/security/2021/dsa-4881"},{"source":"ADP: CVE","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"ADP: CVE","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"remediation":[],"revision":"12f06da324c110f04ab946ec348f2d7d5f2c46be6faa6fb806bc1138562c366b","sources":[{"modifiedAt":1793642226989,"name":"CNA: hackerone","retrievedAt":1793642922708,"url":"https://www.cve.org/CVERecord?id=CVE-2020-8231"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642931974,"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-8231"}],"ssvc":{"assessedAt":1793642213139,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2020-8231","updatedAt":1793642931974}