Kritik CVSS 9.8
CVE-2019-5481: Curl: güvenlik açığı
Açıklama (NVD)
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %7,47 (yüzdelik 94)
- CWE
- CWE-415
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.52.0 | 7.65.3 | — |
| fedoraproject-fedora | 29 | 29 | — |
| fedoraproject-fedora | 30 | 30 | — |
| fedoraproject-fedora | 31 | 31 | — |
| netapp-cloud-backup | — | — | — |
| netapp-steelstore | — | — | — |
| netapp-solidfire-baseboard-management-controller-firmware | — | — | — |
| oracle-communications-operations-monitor | 3.4 | 3.4 | — |
| oracle-communications-operations-monitor | 4.0 | 4.0 | — |
| oracle-communications-operations-monitor | 4.1 | 4.1 | — |
| oracle-communications-operations-monitor | 4.2 | 4.2 | — |
| oracle-communications-operations-monitor | 4.3 | 4.3 | — |
| oracle-communications-session-border-controller | 8.3 | 8.3 | — |
| oracle-communications-session-border-controller | 8.4 | 8.4 | — |
| oracle-enterprise-manager-ops-center | 12.3.3 | 12.3.3 | — |
| oracle-enterprise-manager-ops-center | 12.4.0 | 12.4.0 | — |
| oracle-mysql-server | 5.7.0 | 5.7.28 | — |
| oracle-mysql-server | 8.0.0 | 8.0.18 | — |
| oracle-oss-support-tools | 20.0 | 20.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| opensuse-leap | 15.0 | 15.0 | — |
| opensuse-leap | 15.1 | 15.1 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- curl.haxx.se
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org
- security.gentoo.org
- security.netapp.com
- www.debian.org
- www.oracle.com
- www.oracle.com
- www.oracle.com
- lists.opensuse.org
- lists.opensuse.org
- curl.haxx.se
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org
- security.gentoo.org
- security.netapp.com
- www.debian.org
- www.oracle.com
- CWE-415