Description
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
curl curl
Default version status: unaffected
7.69.0 to < 8.14.2affected8.15.0 to < 8.16.1affected
curl curl
Default version status: unaffected
6773c7ca65cf2183295e56603f9b86a5ce816a06 to < b011e3fcfb06d6c0278595ee2ee297036fbe9793affected
curl curl
Default version status: unaffected
8.16.0affected8.15.0affected8.14.1affected8.14.0affected8.13.0affected8.12.1affected8.12.0affected8.11.1affected8.11.0affected8.10.1affected8.10.0affected8.9.1affected8.9.0affected8.8.0affected8.7.1affected8.7.0affected8.6.0affected8.5.0affected8.4.0affected8.3.0affected8.2.1affected8.2.0affected8.1.2affected8.1.1affected8.1.0affected8.0.1affected8.0.0affected7.88.1affected7.88.0affected7.87.0affected7.86.0affected7.85.0affected7.84.0affected7.83.1affected7.83.0affected7.82.0affected7.81.0affected7.80.0affected7.79.1affected7.79.0affected7.78.0affected7.77.0affected7.76.1affected7.76.0affected7.75.0affected7.74.0affected7.73.0affected7.72.0affected7.71.1affected7.71.0affected7.70.0affected7.69.1affected7.69.0affected