9.8
Critical
CVE-2019-5481 Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
Description
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| curl | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- openSUSE-SU-2019:2149 lists.opensuse.org
- FEDORA-2019-9e6357d82f lists.fedoraproject.org
- FEDORA-2019-6d7f6fa2c8 lists.fedoraproject.org
- openSUSE-SU-2019:2169 lists.opensuse.org
- FEDORA-2019-f2a520135e lists.fedoraproject.org
- DSA-4633 www.debian.org
- 20200225 [SECURITY] [DSA 4633-1] curl security update seclists.org
- GLSA-202003-29 security.gentoo.org
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- curl.haxx.se curl.haxx.se
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of curl
The 4 CVEs of curl →
CVE-2016-4606
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute…
Not rated
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
9.8
Critical
CVE-2019-5443
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/)…
Not rated