PT-2020-12266

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 5.5 through 7 SR0630 Description The issue is related to a double free in the tftp client library of Wind River VxWorks. Recommendations For versions 5.5 through 7 SR0630, at the moment, there is no information abou...

Scientific Linux Security Update : curl on SL7.x x86_64 (20200407)

curl: TFTP receive heap buffer overflow in tftpreceivepacket function C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135804; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Arbitrary Code Execution

dnsmasq is vulnerable to arbitrary code execution. Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled the "--enable-tftp" command line option, or by enabling "enable-tftp" in "/etc/dnsmasq.conf". If the configured tftp-root is sufficiently long,...

Denial Of Service (DoS)

dnsmasq is vulnerable to denial of service. A NULL pointer dereference flaw was discovered in dnsmasq when the TFTP service is enabled. This flaw could allow a malicious TFTP client to crash the dnsmasq service...

curl security and bug fix update

7.29.0-57.0.1 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitiv...

RHEL 7 : curl (RHSA-2020:1020)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1020 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...

Low: Red Hat Security Advisory: curl security and bug fix update

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1...

EulerOS Virtualization 3.0.2.2 : curl-openssl (EulerOS-SA-2020-1278)

According to the versions of the curl-openssl package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4...

EulerOS Virtualization 3.0.2.2 : curl (EulerOS-SA-2020-1271)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1271)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

atftp: Multiple vulnerabilities

Background atftp is a client/server implementation of the TFTP protocol that implements RFCs 1350, 2090, 2347, 2348, and 2349. Description Multiple vulnerabilities have been discovered in atftp. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a...

EulerOS Virtualization for ARM 64 3.0.2.0 : curl (EulerOS-SA-2020-1233)

According to the versions of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482 - curl before version 7.51.0 us...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : curl (ELSA-2020-5562)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5562 advisory. 7.29.0-54.0.5.el77.2 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug:30568724 Tenable has...

Oracle Linux 6 : curl (ELSA-2020-5561)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5561 advisory. 7.19.7-54.0.2 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug:30568724 462 Tenable has extracted...

curl security update

7.29.0-54.0.5.el77.2 - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug:30568724...

cURL and libcurl TFTP Heap Buffer Overflow (CVE-2019-5436)

A heap-based buffer overflow vulnerability exists in cURL and libcurl. Successful exploitation of this vulnerability could result in the execution of arbitrary code in the security context of the target user...

Debian DSA-4633-1 : curl - security update

Multiple vulnerabilities were discovered in cURL, an URL transfer library. - CVE-2019-5436 A heap buffer overflow in the TFTP receiving code was discovered, which could allow DoS or arbitrary code execution. This only affects the oldstable distribution stretch. - CVE-2019-5481 Thomas Vegas...

Moxa AWK-3131A iw_webs iw_serverip Parameter Command Injection Vulnerability

Summary An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. An...