CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
hackeroneCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
haxxcurl
7.52.0 ≤
𝑥
≤ 7.65.3
netappcloud_backup
-
netappsteelstore
-
netappsolidfire_baseboard_management_controller_firmware
-
oraclecommunications_operations_monitor
3.4
oraclecommunications_operations_monitor
4.0
oraclecommunications_operations_monitor
4.1
oraclecommunications_operations_monitor
4.2
oraclecommunications_operations_monitor
4.3
oraclecommunications_session_border_controller
8.3
oraclecommunications_session_border_controller
8.4
oracleenterprise_manager_ops_center
12.3.3
oracleenterprise_manager_ops_center
12.4.0
oraclemysql_server
5.7.0 ≤
𝑥
≤ 5.7.28
oraclemysql_server
8.0.0 ≤
𝑥
≤ 8.0.18
oracleoss_support_tools
20.0
debiandebian_linux
9.0
debiandebian_linux
10.0
opensuseleap
15.0
opensuseleap
15.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
curl
bullseye
7.74.0-1.3+deb11u13
fixed
jessie
not-affected
bullseye (security)
7.74.0-1.3+deb11u11
fixed
bookworm
7.88.1-10+deb12u7
fixed
bookworm (security)
7.88.1-10+deb12u5
fixed
sid
8.10.1-2
fixed
trixie
8.10.1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
curl
disco
Fixed 7.64.0-2ubuntu1.2
released
bionic
Fixed 7.58.0-2ubuntu3.8
released
xenial
not-affected
trusty
not-affected
References