Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnurlUpgrade curl | Nov 8, 2019 | Sep 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curlUpgrade curl-debuginfo | Apr 27, 2020 | Sep 16, 2019 |
| Amazon_linux | — | Upgrade curl | Oct 4, 2019 | Sep 11, 2019 |
| Centos_linux | — | Upgrade libcurlUpgrade curl-debugsourceUpgrade libcurl-debuginfoUpgrade curl-debuginfoUpgrade libcurl-develUpgrade curl-minimal-debuginfoUpgrade curlUpgrade libcurl-minimal-debuginfoUpgrade libcurl-minimal | Apr 29, 2020 | Sep 16, 2019 |
| Debian | — | Upgrade curl | Sep 16, 2019 | Sep 16, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 23, 2020 |
| Freebsd | — | Upgrade mariadb101-serverUpgrade curlUpgrade mysql57-serverUpgrade percona55-serverUpgrade percona57-serverUpgrade mysql56-serverUpgrade percona56-serverUpgrade mariadb104-serverUpgrade mariadb103-serverUpgrade mysql80-serverUpgrade mariadb102-server | Apr 23, 2020 | Sep 14, 2019 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 16, 2020 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Dec 4, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade libcurl-develUpgrade curl | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/curl to version 7.71.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 16, 2019 |
| Oracle_linux | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl-minimalUpgrade libcurl | Mar 9, 2020 | Sep 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2019 |
| Redhat_linux | — | Upgrade curl-debuginfoUpgrade curl-debugsourceUpgrade curl-minimal-debuginfoNo solution existsUpgrade libcurl-minimal-debuginfoUpgrade libcurl-minimalUpgrade libcurl-debuginfoUpgrade libcurl-develUpgrade curlUpgrade libcurl | Apr 29, 2020 | Sep 16, 2019 |
| Suse | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl4-openssl1-32bitUpgrade libcurl4-openssl1-x86Upgrade curl-openssl1Upgrade libcurl4Upgrade libcurl-mini-develUpgrade libcurl4-32bitUpgrade libcurl4-miniUpgrade libcurl-devel-32bitUpgrade libcurl4-openssl1Upgrade curl-mini | Sep 13, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade libcurl3-nss (Ubuntu Pro)Upgrade libcurl4Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl3Upgrade curl (Ubuntu Pro)Upgrade libcurl3-nssUpgrade libcurl3-gnutlsUpgrade curlUpgrade libcurl3 (Ubuntu Pro) | Sep 12, 2019 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub