İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Kritik CVSS 9.8

CVE-2019-5482: Curl: yığın (heap) taşması

Yayın: · Güncelleme:

Açıklama (NVD)

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

Özet bilgiler

Ürün
Haxx Curl
CVSS v3.1
9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
%17,94 (yüzdelik 97)
CWE
CWE-122
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
haxx-curl7.19.47.65.3—
fedoraproject-fedora2929—
fedoraproject-fedora3030—
fedoraproject-fedora3131—
opensuse-leap15.015.0—
opensuse-leap15.115.1—
netapp-cloud-backup———
netapp-oncommand-insight———
netapp-oncommand-unified-manager7.3——
netapp-oncommand-unified-manager9.5——
netapp-oncommand-workflow-automation———
netapp-snapcenter———
netapp-steelstore-cloud-integrated-storage———
oracle-communications-operations-monitor3.43.4—
oracle-communications-operations-monitor4.04.0—
oracle-communications-operations-monitor4.14.1—
oracle-communications-operations-monitor4.24.2—
oracle-communications-operations-monitor4.34.3—
oracle-communications-session-border-controller8.38.3—
oracle-communications-session-border-controller8.48.4—
oracle-enterprise-manager-ops-center12.3.312.3.3—
oracle-enterprise-manager-ops-center12.4.012.4.0—
oracle-http-server12.2.1.3.012.2.1.3.0—
oracle-http-server12.2.1.4.012.2.1.4.0—
oracle-hyperion-essbase11.1.2.411.1.2.4—
oracle-mysql-server5.0.05.7.28—
oracle-mysql-server8.0.08.0.18—
oracle-oss-support-tools20.020.0—
debian-debian-linux9.09.0—
debian-debian-linux10.010.0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları