9.8
Critical
CVE-2019-5482 Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
Description
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| curl | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- openSUSE-SU-2019:2149 lists.opensuse.org
- FEDORA-2019-9e6357d82f lists.fedoraproject.org
- FEDORA-2019-6d7f6fa2c8 lists.fedoraproject.org
- openSUSE-SU-2019:2169 lists.opensuse.org
- FEDORA-2019-f2a520135e lists.fedoraproject.org
- DSA-4633 www.debian.org
- 20200225 [SECURITY] [DSA 4633-1] curl security update seclists.org
- GLSA-202003-29 security.gentoo.org
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- curl.haxx.se curl.haxx.se
Timeline
- Published
- Last modified
Other CVEs of curl
The 4 CVEs of curl →
CVE-2016-4606
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute…
Not rated
CVE-2019-5481
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
9.8
Critical
CVE-2019-5443
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/)…
Not rated