Lucene search
UbuntuUSN-3993-2HistoryMay 22, 2019 - 12:00 a.m.
curl vulnerability
2019-05-2200:00:00
ubuntu.com
139
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- curl - HTTP, HTTPS, and FTP client and client libraries
Details
USN-3993-1 fixed a vulnerability in curl. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that curl incorrectly handled memory when receiving data
from a TFTP server. A remote attacker could use this issue to cause curl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2019-5436)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | libcurl3-gnutls | < 7.35.0-1ubuntu2.20+esm2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | curl | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | curl-dbgsym | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | curl-udeb | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | curl-udeb-dbgsym | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcurl3 | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcurl3-dbg | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcurl3-dbgsym | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcurl3-gnutls | < 7.35.0-1ubuntu2.20 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libcurl3-gnutls-dbgsym | < 7.35.0-1ubuntu2.20 | UNKNOWN |
References
Related
nessus
nessus
RHEL 7 : curl (RHSA-2020:1020)
2020-04-01 00:00:00
CentOS 7 : curl (CESA-2020:1020)
2020-04-10 00:00:00
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2019:1357-2)
2019-07-02 00:00:00
osv
osv
curl - security update
2019-05-25 00:00:00
CVE-2019-5436
2019-05-28 19:29:06
ubuntucve
ubuntucve
CVE-2019-5436
2019-05-22 00:00:00
debian
debian
[SECURITY] [DLA 1804-1] curl security update
2019-05-25 22:00:29
[SECURITY] [DSA 4633-1] curl security update
2020-02-24 19:55:58
prion
prion
Heap overflow
2019-05-28 19:29:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:1363-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:14064-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-3993-2)
2022-08-26 00:00:00
suse
suse
Security update for curl (important)
2019-06-03 00:00:00
Security update for curl (important)
2019-06-04 00:00:00
alpinelinux
alpinelinux
CVE-2019-5436
2019-05-28 19:29:00
archlinux
archlinux
[ASA-201905-11] libcurl-compat: arbitrary code execution
2019-05-31 00:00:00
[ASA-201905-16] curl: arbitrary code execution
2019-05-31 00:00:00
[ASA-201905-12] libcurl-gnutls: arbitrary code execution
2019-05-31 00:00:00
redhat
redhat
(RHSA-2020:2505) Low: curl security update
2020-06-10 16:19:40
(RHSA-2020:1020) Low: curl security and bug fix update
2020-03-31 09:09:24
(RHSA-2020:1792) Moderate: curl security update
2020-04-28 09:16:55
cve
cve
CVE-2019-5436
2019-05-28 19:29:00
ibm
ibm
veracode
veracode
Heap-based Buffer Overflow
2019-05-27 03:15:11
centos
centos
curl, libcurl security update
2020-04-08 17:51:50
cvelist
cvelist
CVE-2019-5436
2019-05-28 18:47:32
checkpoint_advisories
checkpoint_advisories
cURL and libcurl TFTP Heap Buffer Overflow (CVE-2019-5436)
2020-02-25 00:00:00
redhatcve
redhatcve
CVE-2019-5436
2019-05-22 11:21:59
f5
f5
K55133295 : cURL and libcurl vulnerability CVE-2019-5436
2019-07-25 00:00:00
debiancve
debiancve
CVE-2019-5436
2019-05-28 19:29:00
hackerone
hackerone
curl: Heap Buffer Overflow at lib/tftp.c
2019-04-29 18:08:38
curl: Heap buffer overflow in TFTP when using small blksize
2019-08-29 15:52:19
cloudfoundry
cloudfoundry
USN-3993-1: curl vulnerabilities | Cloud Foundry
2019-05-29 00:00:00
freebsd
freebsd
curl -- multiple vulnerabilities
2019-05-22 00:00:00
curl -- multiple vulnerabilities
2019-09-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.65.0-alt1
2019-05-24 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2019-05-22 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: curl-7.64.0-7.fc30
2019-05-25 01:06:42
[SECURITY] Fedora 30 Update: curl-7.65.3-4.fc30
2019-09-18 00:56:35
[SECURITY] Fedora 29 Update: curl-7.61.1-11.fc29
2019-06-09 02:58:45
slackware
slackware
[slackware-security] curl
2019-05-22 23:31:53
oraclelinux
oraclelinux
curl security update
2020-05-05 00:00:00
curl security and bug fix update
2020-04-06 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2019-11-30 16:06:06
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-03-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0017
2019-06-06 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0017
2019-06-06 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00