Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curlUpgrade gnurl | Nov 8, 2019 | Sep 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade curl-debuginfoUpgrade libcurlUpgrade curl | Apr 27, 2020 | Sep 16, 2019 |
| Amazon_linux | — | Upgrade curl | Oct 4, 2019 | Sep 11, 2019 |
| Centos_linux | — | Upgrade libcurl-minimal-debuginfoUpgrade libcurl-minimalUpgrade curl-debuginfoUpgrade curlUpgrade libcurl-debuginfoUpgrade libcurlUpgrade libcurl-develUpgrade curl-debugsourceUpgrade curl-minimal-debuginfo | Apr 29, 2020 | Sep 16, 2019 |
| Debian | — | Upgrade curl | Sep 16, 2019 | Sep 16, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 23, 2020 |
| Freebsd | — | Upgrade mariadb102-serverUpgrade mysql80-serverUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade percona56-serverUpgrade percona57-serverUpgrade curlUpgrade mysql56-serverUpgrade percona55-serverUpgrade mariadb101-serverUpgrade mysql57-server | Apr 23, 2020 | Sep 14, 2019 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 16, 2020 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Dec 4, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade curlUpgrade libcurlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Nov 19, 2019 | Sep 16, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/curl to version 7.71.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 16, 2019 |
| Oracle_linux | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl-minimalUpgrade libcurl | Mar 9, 2020 | Sep 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2019 |
| Redhat_linux | — | Upgrade libcurlUpgrade curlUpgrade libcurl-debuginfoUpgrade libcurl-minimal-debuginfoUpgrade libcurl-develUpgrade libcurl-minimalUpgrade curl-debugsourceUpgrade curl-debuginfoUpgrade curl-minimal-debuginfoNo solution exists | Apr 29, 2020 | Sep 16, 2019 |
| Suse | — | Upgrade libcurl4-openssl1Upgrade curl-miniUpgrade libcurl4-32bitUpgrade libcurl4-miniUpgrade libcurl-devel-32bitUpgrade libcurl4-openssl1-x86Upgrade curl-openssl1Upgrade libcurl4-openssl1-32bitUpgrade curlUpgrade libcurl-mini-develUpgrade libcurl4Upgrade libcurl-devel | Sep 13, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade curl (Ubuntu Pro)Upgrade libcurl3 (Ubuntu Pro)Upgrade curlUpgrade libcurl3-nssUpgrade libcurl3-gnutlsUpgrade libcurl3-nss (Ubuntu Pro)Upgrade libcurl3Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl4 | Sep 12, 2019 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub