CVE-2019-5482

Published: Sep 16, 2019Modified: Oct 14, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

Affected (30)

Products: Haxx: Curl · Fedoraproject: Fedora · Opensuse: Leap · +3 more

Show all products

1 product

1 product

1 product

6 products

Oncommand Insight

Oncommand Unified Manager

Oncommand Workflow Automation

Steelstore Cloud Integrated Storage

7 products

Communications Operations Monitor

Communications Session Border Controller

Enterprise Manager Ops Center

Hyperion Essbase

Oss Support Tools

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	7.19.4 ≤ version ≤ 7.65.3

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 29
Fedoraproject Fedora	Version 30
Fedoraproject Fedora	Version 31

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Configuration D

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Unified Manager	version ≥ 9.5
Netapp Oncommand Unified Manager	version ≥ 7.3
Netapp Oncommand Workflow Automation	All versions
Netapp Snapcenter	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

Configuration E

15 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Operations Monitor	Version 3.4
Oracle Communications Operations Monitor	Version 4.0
Oracle Communications Operations Monitor	Version 4.1
Oracle Communications Operations Monitor	Version 4.2
Oracle Communications Operations Monitor	Version 4.3
Oracle Communications Session Border Controller	Version 8.3
Oracle Communications Session Border Controller	Version 8.4
Oracle Enterprise Manager Ops Center	Version 12.3.3
Oracle Enterprise Manager Ops Center	Version 12.4.0
Oracle Http Server	Version 12.2.1.3.0
Oracle Http Server	Version 12.2.1.4.0
Oracle Hyperion Essbase	Version 11.1.2.4
Oracle Mysql Server	5.0.0 ≤ version ≤ 5.7.28
Oracle Mysql Server	8.0.0 ≤ version ≤ 8.0.18
Oracle Oss Support Tools	Version 20.0

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (29)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html

Source: support@hackerone.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html

Source: support@hackerone.com

Mailing ListThird Party Advisory

https://curl.haxx.se/docs/CVE-2019-5482.html

Source: support@hackerone.com

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/

Source: support@hackerone.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/

Source: support@hackerone.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/

Source: support@hackerone.com

https://seclists.org/bugtraq/2020/Feb/36

Source: support@hackerone.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202003-29

Source: support@hackerone.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191004-0003/

Source: support@hackerone.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200416-0003/

Source: support@hackerone.com

Third Party Advisory

https://www.debian.org/security/2020/dsa-4633

Source: support@hackerone.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: support@hackerone.com

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: support@hackerone.com

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: support@hackerone.com

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://curl.haxx.se/docs/CVE-2019-5482.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2020/Feb/36

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202003-29

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191004-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200416-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2020/dsa-4633

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.