PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2019-5482

CVE-2019-5482

curl: heap buffer overflow in function tftp_receive_packet()

Loading…

Severity

Moderate

Red Hat Product Security

6.3

CVSS 3.0

Review impact separately from score.

Published · September 11, 2019

Updated · August 9, 2026

Description

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Do not use TFTP with curl with smaller than the default BLKSIZE.

CVSS / CWE

CVSS 3.0 · 6.3
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-122 · Heap-based Buffer Overflow