ALPINE-CVE-2019-5436 PUBLISHED CVSS 7.800000190734863 HIGH

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.9curl7.19.5-r0, 7.19.6-r0, 7.19.7-r0
Alpine:v3.22curl7.64.1-r3, 7.64.1-r2, 7.64.1-r1
Alpine:v3.17curl7.19.2-r0, 7.64.1-r3, 7.64.1-r2
Alpine:v3.12curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.11curl7.64.1-r3, 0, 7.19.2-r0
Alpine:v3.13curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.20curl7.21.2-r0, 0, 7.19.2-r0
Alpine:v3.14curl7.19.2-r0, 0, 7.64.1-r3
Alpine:v3.16curl7.19.2-r0, 7.19.2-r1, 7.19.4-r0
Alpine:v3.18curl0, 0, 7.19.2-r0
Alpine:v3.15curl7.64.1-r1, 7.64.1-r0, 7.64.0-r1
Alpine:v3.23curl7.64.1-r3, 0, 7.19.2-r0
Alpine:v3.10curl0, 7.64.1-r3, 7.64.1-r2
Alpine:v3.21curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.19curl7.64.1-r3, 7.64.1-r1, 7.64.1-r0

Timeline

References

Open in Interactive Console →