TI-2019-03845 CVE-2019-5436 · GHSA-8xvc-p9x4-w7jm
Heap-based buffer overflow in curl
Priority HIGH 67
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
RHSA-2020:1020
curl security and bug fix update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-57.el7, libcurl-7.29.0-57.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-57.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) curl-7.29.0-57.el7, libcurl-7.29.0-57.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-57.el7
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-57.el7, libcurl-7.29.0-57.el7, libcurl-7.29.0-57.el7.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-57.el7, libcurl-7.29.0-57.el7, libcurl-devel-7.29.0-57.el7