Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Critical CVSS 9.8
Summary
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
- :
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html Mailing List
- https://curl.haxx.se/docs/CVE-2019-5481.html Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
- https://seclists.org/bugtraq/2020/Feb/36 Mailing List
- https://security.gentoo.org/glsa/202003-29 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191004-0003/ Third Party Advisory
- https://www.debian.org/security/2020/dsa-4633 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch
- https://www.oracle.com/security-alerts/cpujan2020.html Patch
- https://www.oracle.com/security-alerts/cpuoct2020.html Patch
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html Mailing List
- https://curl.haxx.se/docs/CVE-2019-5481.html Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
- https://seclists.org/bugtraq/2020/Feb/36 Mailing List
- https://security.gentoo.org/glsa/202003-29 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191004-0003/ Third Party Advisory
- https://www.debian.org/security/2020/dsa-4633 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch
- https://www.oracle.com/security-alerts/cpujan2020.html Patch
- https://www.oracle.com/security-alerts/cpuoct2020.html Patch
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD