USN-3993-2 curl vulnerability

🗓️ 22 May 2019 16:19:07Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Curl memory handling flaw with TFTP that could crash or allow remote code execution (CVE-2019-5436).

Reporter	Title	Published	Views	Family All 240
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2019-5435, CVE-2019-5436)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by a vulnerability in libcurl (CVE-2019-5436)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcurl affects the OS image for RedHat Enterprise Linux for IBM Cloud Pak System (CVE-2019-5436)	11 Sep 202012:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in libcurl (CVE-2019-5436)	11 Mar 202119:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by a vulnerability in libcurl (CVE-2019-5436)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.	21 Feb 202204:39	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1233)	24 Jul 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2019-1233)	26 Jul 201900:00	–	nessus

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-3993-2
ubuntu	www.ubuntu.com/security/CVE-2019-5436

27 Apr 2026 09:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.6

CVSS 3.17.8

EPSS0.49739

SSVC