Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnurlUpgrade curl | Nov 8, 2019 | Sep 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade curlUpgrade curl-debuginfoUpgrade libcurl | Apr 27, 2020 | Sep 16, 2019 |
| Amazon_linux | — | Upgrade curl | Oct 4, 2019 | Sep 11, 2019 |
| Centos_linux | — | Upgrade curl-minimal-debuginfoUpgrade libcurl-develUpgrade curl-debuginfoUpgrade libcurl-debuginfoUpgrade libcurlUpgrade curlUpgrade curl-debugsourceUpgrade libcurl-minimalUpgrade libcurl-minimal-debuginfo | Apr 29, 2020 | Sep 16, 2019 |
| Debian | — | Upgrade curl | Sep 16, 2019 | Sep 16, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 23, 2020 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-serverUpgrade mysql80-serverUpgrade mariadb102-serverUpgrade percona56-serverUpgrade mysql56-serverUpgrade curlUpgrade mysql57-serverUpgrade mariadb101-serverUpgrade percona57-serverUpgrade percona55-server | Apr 23, 2020 | Sep 14, 2019 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 16, 2020 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Dec 4, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Nov 19, 2019 | Sep 16, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/curl to version 7.71.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 16, 2019 |
| Oracle_linux | — | Upgrade curlUpgrade libcurl-minimalUpgrade libcurl-develUpgrade libcurl | Mar 9, 2020 | Sep 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2019 |
| Redhat_linux | — | Upgrade curl-debuginfoUpgrade curl-minimal-debuginfoUpgrade curl-debugsourceNo solution existsUpgrade curlUpgrade libcurl-debuginfoUpgrade libcurlUpgrade libcurl-minimal-debuginfoUpgrade libcurl-develUpgrade libcurl-minimal | Apr 29, 2020 | Sep 16, 2019 |
| Suse | — | Upgrade libcurl4-32bitUpgrade libcurl4-openssl1Upgrade libcurl-devel-32bitUpgrade curl-miniUpgrade libcurl4-miniUpgrade curlUpgrade libcurl-develUpgrade libcurl4-openssl1-32bitUpgrade libcurl-mini-develUpgrade libcurl4-openssl1-x86Upgrade libcurl4Upgrade curl-openssl1 | Sep 13, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade curlUpgrade curl (Ubuntu Pro)Upgrade libcurl3-gnutlsUpgrade libcurl3 (Ubuntu Pro)Upgrade libcurl3-nss (Ubuntu Pro)Upgrade libcurl4Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl3 | Sep 12, 2019 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub