CVE-2019-5481

EPSS 7.27%
Veröffentlicht 16.09.2019 19:15:10
Zuletzt bearbeitet 16.04.2026 15:16:40
Quelle support@hackerone.com
CVE-Watchlists
Login
Unerledigt
Login

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 16

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Haxx ≫ Curl Version >= 7.52.0 <= 7.65.3

Fedoraproject ≫ Fedora Version29

Fedoraproject ≫ Fedora Version30

Fedoraproject ≫ Fedora Version31

Netapp ≫ Cloud Backup Version-

Netapp ≫ Steelstore Version-

Netapp ≫ Solidfire Baseboard Management Controller Firmware Version-

Netapp ≫ Solidfire Baseboard Management Controller Version-

Oracle ≫ Communications Operations Monitor Version3.4

Oracle ≫ Communications Operations Monitor Version4.0

Oracle ≫ Communications Operations Monitor Version4.1

Oracle ≫ Communications Operations Monitor Version4.2

Oracle ≫ Communications Operations Monitor Version4.3

Oracle ≫ Communications Session Border Controller Version8.3

Oracle ≫ Communications Session Border Controller Version8.4

Oracle ≫ Enterprise Manager Ops Center Version12.3.3

Oracle ≫ Enterprise Manager Ops Center Version12.4.0

Oracle ≫ Mysql Server Version >= 5.7.0 <= 5.7.28

Oracle ≫ Mysql Server Version >= 8.0.0 <= 8.0.18

Oracle ≫ Oss Support Tools Version20.0

Debian ≫ Debian Linux Version9.0

Debian ≫ Debian Linux Version10.0

Opensuse ≫ Leap Version15.0

Opensuse ≫ Leap Version15.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.27%	0.936

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address.

https://www.oracle.com/security-alerts/cpujan2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch

Third Party Advisory

https://security.gentoo.org/glsa/202003-29

Third Party Advisory

https://seclists.org/bugtraq/2020/Feb/36

Third Party Advisory

Mailing List

https://www.debian.org/security/2020/dsa-4633

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html

Third Party Advisory

Mailing List

https://curl.haxx.se/docs/CVE-2019-5481.html

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/

https://security.netapp.com/advisory/ntap-20191004-0003/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-5481

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-5481

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-5481

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-5481