CVE-2019-5481

Description

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

CVSS breakdown

Affected products

• Debian / debian_linux9.0 – 9.0
• Debian / debian_linux10.0 – 10.0
• fedoraproject / fedora29 – 29
• fedoraproject / fedora31 – 31
• fedoraproject / fedora30 – 30
• haxx / curl7.52.0 – 7.65.3
• NetApp / cloud_backup
• NetApp / solidfire_baseboard_management_controller_firmware
• NetApp / steelstore
• openSUSE / Leap15.1 – 15.1
• openSUSE / Leap15.0 – 15.0
• oracle / communications_operations_monitor4.3 – 4.3
• oracle / communications_operations_monitor4.1 – 4.1
• oracle / communications_operations_monitor4.0 – 4.0
• oracle / communications_operations_monitor3.4 – 3.4
• oracle / communications_operations_monitor4.2 – 4.2
• oracle / communications_session_border_controller8.3 – 8.3
• oracle / communications_session_border_controller8.4 – 8.4
• oracle / enterprise_manager_ops_center12.3.3 – 12.3.3
• oracle / enterprise_manager_ops_center12.4.0 – 12.4.0
• oracle / mysql_server5.7.0 – 5.7.28
• oracle / oss_support_tools20.0 – 20.0

References

• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/
• VENDOR_ADVISORYhttps://www.debian.org/security/2020/dsa-4633
• MAILING_LISThttps://seclists.org/bugtraq/2020/Feb/36
• MISChttps://security.gentoo.org/glsa/202003-29
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuapr2020.html
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpujan2020.html
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuoct2020.html
• MISChttps://curl.haxx.se/docs/CVE-2019-5481.html
• MISChttps://security.netapp.com/advisory/ntap-20191004-0003/