All vulnerabilities

Servers and applications

CVE-2016-8621

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.

Severity
High 7.5
Published
31 Jul 2018
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.51.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • Every version before 7.51.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-8621
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-8621