Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnurlUpgrade curl | Nov 8, 2019 | Sep 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade curl-debuginfoUpgrade libcurlUpgrade curl | Apr 27, 2020 | Sep 16, 2019 |
| Amazon_linux | — | Upgrade curl | Oct 4, 2019 | Sep 11, 2019 |
| Centos_linux | — | Upgrade libcurlUpgrade curl-debuginfoUpgrade curlUpgrade curl-minimal-debuginfoUpgrade libcurl-debuginfoUpgrade curl-debugsourceUpgrade libcurl-develUpgrade libcurl-minimalUpgrade libcurl-minimal-debuginfo | Apr 29, 2020 | Sep 16, 2019 |
| Debian | — | Upgrade curl | Sep 16, 2019 | Sep 16, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 23, 2020 |
| Freebsd | — | Upgrade curlUpgrade percona57-serverUpgrade percona55-serverUpgrade mysql57-serverUpgrade mysql56-serverUpgrade mariadb101-serverUpgrade mysql80-serverUpgrade mariadb102-serverUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade percona56-server | Apr 23, 2020 | Sep 14, 2019 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 16, 2020 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Dec 4, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Nov 19, 2019 | Sep 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curl | Nov 19, 2019 | Sep 16, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/curl to version 7.71.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 16, 2019 |
| Oracle_linux | — | Upgrade libcurlUpgrade libcurl-minimalUpgrade curlUpgrade libcurl-devel | Mar 9, 2020 | Sep 11, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2019 |
| Redhat_linux | — | Upgrade libcurl-minimalUpgrade libcurl-minimal-debuginfoUpgrade curlUpgrade libcurlUpgrade libcurl-debuginfoUpgrade libcurl-develUpgrade curl-debugsourceNo solution existsUpgrade curl-minimal-debuginfoUpgrade curl-debuginfo | Apr 29, 2020 | Sep 16, 2019 |
| Suse | — | Upgrade curl-miniUpgrade libcurl4-openssl1Upgrade libcurl4-32bitUpgrade libcurl4-miniUpgrade libcurl-devel-32bitUpgrade libcurl4Upgrade libcurl4-openssl1-x86Upgrade libcurl-develUpgrade libcurl4-openssl1-32bitUpgrade libcurl-mini-develUpgrade curlUpgrade curl-openssl1 | Sep 13, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade libcurl3Upgrade libcurl4Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl3-nss (Ubuntu Pro)Upgrade curl (Ubuntu Pro)Upgrade curlUpgrade libcurl3 (Ubuntu Pro)Upgrade libcurl3-nssUpgrade libcurl3-gnutls | Sep 12, 2019 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub