NetSight
IP …
critical9.8

CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

Impact

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

Affected products

VendorProductAffected versions
HaxxCurl
from 7.52.0 through 7.65.3
FedoraprojectFedora
Versions 29, 30, 31
NetappCloud Backup
All versions
NetappSteelstore
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
OracleCommunications Operations Monitor
Versions 3.4, 4.0, 4.1, 4.2, 4.3
OracleCommunications Session Border Controller
Versions 8.3, 8.4
OracleEnterprise Manager Ops Center
Versions 12.3.3, 12.4.0
OracleMysql Server
from 5.7.0 through 5.7.28
from 8.0.0 through 8.0.18
OracleOss Support Tools
Version 20.0
DebianDebian Linux
Versions 9.0, 10.0
OpensuseLeap
Versions 15.0, 15.1

Weakness classification

CWE-415

References