10922 matches found
SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2019:1357-1)
This update for curl fixes the following issues : Security issue fixed : CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...
SUSE SLES11 Security Update : curl (SUSE-SU-2019:14064-1)
This update for curl fixes the following issues : Security issue fixed : CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...
FreeBSD : curl -- multiple vulnerabilities (dd343a2b-7ee7-11e9-a290-8ddc52868fa9)
curl security problems : CVE-2019-5435: Integer overflows in curlurlset libcurl contains two integer overflows in the curlurlset function that if triggered, can lead to a too small buffer allocation and a subsequent heap buffer overflow. The flaws only exist on 32 bit architectures and require...
Debian DLA-1804-1 : curl security update
cURL, an URL transfer library, contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It calls recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap...
SUSE-SU-2019:1357-1 Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170...
Fedora Update for curl FEDORA-2019-3f5b6f0f97
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian: Security Advisory (DLA-1804-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1804-1] curl security update
Package : curl Version : 7.38.0-4+deb8u15 CVE ID : CVE-2019-5436 Debian Bug : 929351 cURL, an URL transfer library, contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It calls recvfrom with the default size for the buffer rather than with the...
[SECURITY] Fedora 30 Update: curl-7.64.0-7.fc30
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
SUSE-SU-2019:14064-1 Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftpreceivepacket that receives data from a TFTP server bsc1135170...
Oracle Linux 6 / 7 : curl (ELSA-2019-4652)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4652 advisory. - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password compariso...
Security fix for the ALT Linux 8 package curl version 7.65.0-alt1
7.65.0-alt1 built May 24, 2019 Anton Farygin in task 229802 May 22, 2019 Anton Farygin - 7.65.0 - fixes: CVE-2019-5435: Integer overflows in curlurlset CVE-2019-5436: tftp: use the current blksize for recvfrom...
Ubuntu 16.04 LTS / 18.04 LTS : curl vulnerabilities (USN-3993-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3993-1 advisory. Wenchao Li discovered that curl incorrectly handled memory in the curlurlset function. A remote attacker could use this issue to cause curl t...
Ubuntu: Security Advisory (USN-3993-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2019-142-01)
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-142-01. The text itself is copyright C Slackware Linux,...
USN-3993-2 curl vulnerability
USN-3993-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that curl incorrectly handled memory when receiving data from a TFTP server. A remote attacker could use this issue to...
USN-3993-2: curl vulnerability
USN-3993-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that curl incorrectly handled memory when receiving data from a TFTP server. A remote attacker could use this issue to...
USN-3993-1: curl vulnerabilities
Wenchao Li discovered that curl incorrectly handled memory in the curlurlset function. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. CVE-2019-5435 It was discovered that...
USN-3993-1 curl vulnerabilities
Wenchao Li discovered that curl incorrectly handled memory in the curlurlset function. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. CVE-2019-5435 It was discovered that...
