VDB

ALPINE-CVE-2019-5481

ALPINE-CVE-2019-5481 PUBLISHED CVSS 9.800000190734863 CRITICAL

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.23curl7.52.0, 0, 7.65.3-r0
Alpine:v3.11curl7.62.0-r2, 7.52.0, 0
Alpine:v3.24curl0, 7.52.0
Alpine:v3.12curl7.19.4-r0, 7.19.5-r0, 7.20.1-r0
Alpine:v3.10curl0, 7.19.2-r0, 7.19.2-r1
Alpine:v3.14curl0, 7.52.0, 0
Alpine:v3.21curl7.27.0-r1, 7.46.0-r0, 7.21.5-r0
Alpine:v3.19curl7.19.7-r0, 7.52.0, 0
Alpine:v3.7curl7.56.1-r1, 7.19.2-r0, 7.19.2-r1
Alpine:v3.8curl7.53.1-r3, 7.53.1-r1, 7.52.1-r0
Alpine:v3.9curl7.60.0-r1, 7.32.0-r0, 0
Alpine:v3.13curl7.52.0, 0, 7.19.2-r0
Alpine:v3.20curl7.19.2-r1, 7.52.0, 0
Alpine:v3.16curl7.64.1-r0, 7.64.0-r0, 7.64.0-r1
Alpine:v3.22curl7.42.0-r0, 0, 7.19.2-r0
Alpine:v3.18curl7.54.0-r0, 7.54.1-r0, 7.55.0-r0
Alpine:v3.15curl7.56.1-r0, 7.19.2-r0, 7.19.6-r0
Alpine:v3.17curl7.19.5-r0, 7.19.2-r0, 0

Timeline

  • Sep 16, 2019 CVE Published
  • Apr 30, 2026 Distribution Patch
  • Jul 8, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›