CVE-2019-5436High· 7.8▾ TwilightA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 9.9 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
50%
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
libcurl >= 7.19.4, <= 7.64.1leap = 15.0leap = 15.1leap = 42.3fedora = 29debian_linux = 9.0debian_linux = 10.0traffix_signaling_delivery_controller >= 5.0.0, <= 5.1.0hci_management_nodesolidfiresteelstore_cloud_integrated_storageenterprise_manager_ops_center = 12.3.3enterprise_manager_ops_center = 12.4.0mysql_server <= 5.7.27mysql_server >= 5.7.28, <= 8.0.17oss_support_tools = 20.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2019-5482Critical· 9.8Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2020-8285High· 7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVE-2024-7264Medium· 6.5libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field
CVE-2023-27537Medium· 5.9A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"
CVE-2023-27538Medium· 5.5An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse
CVE-2023-27535Medium· 5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers