This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-5436 →

DEBIAN-CVE-2019-5436

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4"}]}]

Debian:13 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4"}]}]

Debian:14 curl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4"}]}]