TI-2019-03845 CVE-2019-5436 · GHSA-8xvc-p9x4-w7jm
Heap-based buffer overflow in curl
Priority HIGH 67
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
RHSA-2020:2505
curl security update
Released 2020-06-12 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) curl-7.29.0-54.el7_7.3, libcurl-7.29.0-54.el7_7.3
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) libcurl-devel-7.29.0-54.el7_7.3
- Red Hat Enterprise Linux Server EUS (v. 7.7) curl-7.29.0-54.el7_7.3, libcurl-7.29.0-54.el7_7.3, libcurl-7.29.0-54.el7_7.3.ppc +2