CVE-2019-5435
Published: 22 May 2019
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
Priority
CVSS 3 base score: 3.7
Status
Package | Release | Status |
---|---|---|
curl Launchpad, Ubuntu, Debian |
Upstream |
Released
(7.65.0)
|
Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(code not present)
|
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Not vulnerable
(code not present)
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Not vulnerable
(code not present)
|
|
Patches: Upstream: https://github.com/curl/curl/commit/5fc28510a4664f4 |