CVE-2020-8169
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Published Dec 14, 2020 · updated Oct 14, 2026 · haxx curl
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2020 · NIST NVD
Detected
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Oct 14, 2026 · NIST NVD
Updated
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
Affected
- cpe debian/debian linux10.0
- cpe haxx/curlversion unspecified
- cpe siemens/simatic tim 1531 irc firmwareversion unspecified
- cpe siemens/sinec infrastructure network servicesversion unspecified
- cpe splunk/universal forwarderversion unspecified
- cpe splunk/universal forwarder9.1.0
Sources
- CVE.orgVulnerability recordCVE-2020-8169
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2020-8169
30-day exploitation probability 3.9%
first.org - NIST NVDVulnerability recordCVE-2020-8169
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
nvd.nist.gov