62 matches found
Amazon Linux AMI : curl (ALAS-2019-1294)
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. CVE-2019-5481 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon...
Medium: curl
Issue Overview: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. CVE-2019-5481 Affected Packages: curl Issue Correction: Run yum update curl or yum update --advisory ALAS-2019-129...
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
ALPINE-CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
Heap overflow
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
CVE-2019-5482: Heap-based Buffer Overflow
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Mitigation Do not use TFTP with curl with smaller than the default BLKSIZE...
CVE-2019-5482
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...
SUSE-SU-2019:1357-2 Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170...
The vulnerability of the tftp_receive_packet function in the libcurl library, which relates to writing beyond the buffer boundary, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the tftpreceivepacket function in the libcurl library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
DEBIAN-CVE-2019-5436
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1...
TFTP receive buffer overflow
libcurl contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It calls recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is entirely...
Cisco TFTP Server 1.1 - Denial of Service
Exploit Title: Cisco TFTP Server 1.1 Date: 2010-03-25 Author: SuBz3r0 Software Link: http://www.oldversion.com/CiscoTFTPServer.html Version: 1.1 Tested on: XP SP3,Win2k3 CVE : if exists Code : Cisco TFTP Server v1.1 DoS print "" print "" print " SuBz3r0 " print "" print "" print "Cisco TFTP v1.1...
dnsmasq: multiple vulnerabilities in TFTP server
The tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a TFTP read aka RRQ request with a malformed blksize option...
NetDecision TFTP Server 4.2 TFTP Directory Traversal
--Vulnerability Summary-- Title: NetDecision TFTP Server 4.2 TFTP Directory Traversal Product: NetDecision TFTP Server 4.2 Discovered: April 1, 2009 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: NetMechanica Vendor URL: http://www.netmechanica.com/downloads/ Vendor notification date: Apri...
Gentoo Security Advisory GLSA 200603-19 (curl)
The remote host is missing updates announced in advisory GLSA 200603-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
futuresoft-seh.txt
!/usr/bin/perl =============================================================================================== FutureSoft TFTP Server 2000 Remote SEH Overwrite Exploit By Umesh Wanve =============================================================================================== Date : 22-03-2007...