CVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Published Dec 14, 2020 · updated Oct 14, 2026 · haxx libcurl
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2020 · NIST NVD
Detected
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Oct 14, 2026 · NIST NVD
Updated
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Affected
- cpe apple/mac os xversion unspecified
- cpe debian/debian linux10.0
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora32
- cpe fedoraproject/fedora33
- cpe haxx/libcurlversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/hci bootstrap osversion unspecified
- cpe netapp/hci management nodeversion unspecified
- cpe netapp/hci storage node firmwareversion unspecified
- cpe netapp/solidfireversion unspecified
- cpe oracle/communications billing and revenue management12.0.0.3.0
Sources
- CVE.orgVulnerability recordCVE-2020-8285
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2020-8285
30-day exploitation probability 9.8%
first.org - NIST NVDVulnerability recordCVE-2020-8285
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
nvd.nist.gov