9.8
Critique
CVE-2019-5482 Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
Description
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| curl | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- openSUSE-SU-2019:2149 lists.opensuse.org
- FEDORA-2019-9e6357d82f lists.fedoraproject.org
- FEDORA-2019-6d7f6fa2c8 lists.fedoraproject.org
- openSUSE-SU-2019:2169 lists.opensuse.org
- FEDORA-2019-f2a520135e lists.fedoraproject.org
- DSA-4633 www.debian.org
- 20200225 [SECURITY] [DSA 4633-1] curl security update seclists.org
- GLSA-202003-29 security.gentoo.org
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- curl.haxx.se curl.haxx.se
Chronologie
- Publiée
- Dernière modification
Autres CVE de curl
Les 4 CVE de curl →
CVE-2016-4606
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute…
Non notée
CVE-2019-5481
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
9.8
Critique
CVE-2019-5443
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/)…
Non notée