CVE-2020-8285

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

• haxx libcurl (>= 7.21.0 < 7.74.0) • debian debian linux 9.0 • debian debian linux 10.0 • fedoraproject fedora 32 • fedoraproject fedora 33 • netapp clustered data ontap • netapp hci management node • netapp solidfire • netapp hci bootstrap os • netapp hci storage node firmware • apple mac os x (< 10.14.6) • apple mac os x (>= 10.15 < 10.15.7) • apple mac os x 10.14.6 • apple mac os x 10.15.7 • apple macos (>= 11.0 < 11.3) • oracle communications billing and revenue management 12.0.0.3.0 • oracle communications cloud native core policy 1.14.0 • oracle essbase 21.2 • oracle peoplesoft enterprise peopletools 8.58 • fujitsu m10-1 firmware (< xcp2410) • fujitsu m10-4 firmware (< xcp2410) • fujitsu m10-4s firmware (< xcp2410) • fujitsu m12-1 firmware (< xcp2410) • fujitsu m12-2 firmware (< xcp2410) • fujitsu m12-2s firmware (< xcp2410) • fujitsu m10-1 firmware (< xcp3110) • fujitsu m10-4 firmware (< xcp3110) • fujitsu m10-4s firmware (< xcp3110) • fujitsu m12-1 firmware (< xcp3110) • fujitsu m12-2 firmware (< xcp3110) • fujitsu m12-2s firmware (< xcp3110) • siemens sinec infrastructure network services (< 1.0.1.1) • splunk universal forwarder (>= 8.2.0 < 8.2.12) • splunk universal forwarder (>= 9.0.0 < 9.0.6) • splunk universal forwarder 9.1.0