Linux Distros Unpatched Vulnerability : CVE-2018-18439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local...

curl security update

7.29.0-59.0.1.1 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case...

OPENSUSE-SU-2019:2169-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2019:2149-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. This update was imported from the SUSE:SLE-15:Update update...

CURL-CVE-2019-5482 TFTP small blocksize heap buffer overflow

libcurl contains a heap buffer overflow in the function tftpreceivepacket that receives data from a TFTP server. It can call recvfrom with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is controlled b...

CURL-CVE-2017-1000100 TFTP sends more than buffer size

When doing a TFTP transfer and curl/libcurl is given a URL that contains a long filename longer than about 515 bytes, the filename is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the original length. This too large value is then used in the...