CVE-2019-5482

high-risk

Published 2019-09-16

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

Do I need to act?

6.9% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Mysql Server

Oss Support Tools

Debian Linux

Curl

Fedora

Leap

Cloud Backup

Oncommand Insight

Oncommand Unified Manager

Oncommand Workflow Automation

Snapcenter

Steelstore Cloud Integrated Storage

Communications Operations Monitor

Affected Vendors

Debian Oracle Haxx Fedoraproject Netapp Opensuse

References (28)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html

Vendor Advisory https://curl.haxx.se/docs/CVE-2019-5482.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Mailing List https://seclists.org/bugtraq/2020/Feb/36

Third Party Advisory https://security.gentoo.org/glsa/202003-29

Third Party Advisory https://security.netapp.com/advisory/ntap-20191004-0003/

Third Party Advisory https://security.netapp.com/advisory/ntap-20200416-0003/

Third Party Advisory https://www.debian.org/security/2020/dsa-4633

Patch https://www.oracle.com/security-alerts/cpuapr2020.html

Patch https://www.oracle.com/security-alerts/cpujan2020.html

Patch https://www.oracle.com/security-alerts/cpuoct2020.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html

Vendor Advisory https://curl.haxx.se/docs/CVE-2019-5482.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

and 8 more references

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 9/34 · Low

Exposure 22/34 · High