CVE-2019-5481

🗓️ 16 Sep 2019 18:05:38Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 484 Views

Double-free vulnerability in cURL FTP-kerberos cod

Reporter	Title	Published	Views	Family All 174
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2019-5481, CVE-2019-5482)	21 Feb 202016:14	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - cURL (CVE-2019-5482, CVE-2019-5481)	18 Aug 202019:28	–	ibm
IBM Security Bulletins	Security Bulletin: cURL vulnerabilities CVE-2019-5481 CVE-2019-5482 impact IBM Aspera Streaming/IBM Aspera Streaming for Video version 3.9.6.1 and earlier	10 Dec 202022:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	3 Mar 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201921:21	–	ibm
FreeBSD	curl -- multiple vulnerabilities	11 Sep 201900:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1340)	25 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2019-1294)	4 Oct 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0078: curl (ALINUX3-SA-2021:0078)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : curl (CESA-2020:1792)	1 Feb 202100:00	–	nessus

NVD

Vulners

Node

haxx curlRange7.52.0–7.65.3

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

netapp cloud_backupMatch-

netapp steelstoreMatch-

Node

netapp solidfire_baseboard_management_controller_firmwareMatch-

AND

netapp solidfire_baseboard_management_controllerMatch-

Node

oracle communications_operations_monitorMatch3.4

oracle communications_operations_monitorMatch4.0

oracle communications_operations_monitorMatch4.1

oracle communications_operations_monitorMatch4.2

oracle communications_operations_monitorMatch4.3

oracle communications_session_border_controllerMatch8.3

oracle communications_session_border_controllerMatch8.4

oracle enterprise_manager_ops_centerMatch12.3.3

oracle enterprise_manager_ops_centerMatch12.4.0

oracle mysql_serverRange5.7.0–5.7.28

oracle mysql_serverRange8.0.0–8.0.18

oracle oss_support_toolsMatch20.0

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

[
  {
    "product": "curl",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "7.52.0 to 7.65.3"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
security	www.security.gentoo.org/glsa/202003-29
oracle	www.oracle.com/security-alerts/cpuapr2020.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
oracle	www.oracle.com/security-alerts/cpujan2020.html
curl	www.curl.haxx.se/docs/CVE-2019-5481.html
debian	www.debian.org/security/2020/dsa-4633
seclists	www.seclists.org/bugtraq/2020/Feb/36
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/

16 Apr 2026 15:16Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.03612

SSVC

CWE-415