7.8
High
CVE-2019-5436 A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions…
Description
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| curl | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- openSUSE-SU-2019:1492 lists.opensuse.org
- openSUSE-SU-2019:1508 lists.opensuse.org
- FEDORA-2019-697de0501f lists.fedoraproject.org
- [oss-security] 20190911 [SECURITY ADVISORY] curl: TFTP small blocksize heap buffer overflow www.openwall.com
- DSA-4633 www.debian.org
- 20200225 [SECURITY] [DSA 4633-1] curl security update seclists.org
- GLSA-202003-29 security.gentoo.org
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- curl.haxx.se curl.haxx.se
- support.f5.com support.f5.com
- support.f5.com support.f5.com
Timeline
- Published
- Last modified
Other CVEs of curl
The 98 CVEs of curl →
CVE-2026-107929
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…
8.1
High
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer
8.1
High
CVE-2026-94266
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing…
7.5
High
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might…
9.1
Critical