CVE-2019-5482Critical· 9.8▾ MidnightHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 3.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
18%
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
curl >= 7.19.4, <= 7.65.3fedora = 29fedora = 30fedora = 31leap = 15.0leap = 15.1cloud_backuponcommand_insightoncommand_unified_manager >= 7.3oncommand_unified_manager >= 9.5oncommand_workflow_automationsnapcentersteelstore_cloud_integrated_storagecommunications_operations_monitor = 3.4communications_operations_monitor = 4.0communications_operations_monitor = 4.1communications_operations_monitor = 4.2communications_operations_monitor = 4.3communications_session_border_controller = 8.3communications_session_border_controller = 8.4enterprise_manager_ops_center = 12.3.3enterprise_manager_ops_center = 12.4.0http_server = 12.2.1.3.0http_server = 12.2.1.4.0hyperion_essbase = 11.1.2.4mysql_server >= 5.0.0, <= 5.7.28mysql_server >= 8.0.0, <= 8.0.18oss_support_tools = 20.0debian_linux = 9.0debian_linux = 10.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2019-5436High· 7.8A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-5481Critical· 9.8Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2019-5443High· 7.8A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation
CVE-2019-5435Low· 3.7An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
CVE-2020-8284Low· 3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and n…
CVE-2020-8285High· 7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.