High · published May 28, 2019
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
| Product | Versions | Fixed in |
|---|---|---|
| haxx/libcurl | ≥ 7.19.4, ≤ 7.64.1 | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/leap | all versions | — |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| f5/traffix_signaling_delivery_controller | ≥ 5.0.0, ≤ 5.1.0 | — |
| netapp/hci_management_node | all versions | — |
| netapp/solidfire | all versions | — |
| netapp/steelstore_cloud_integrated_storage | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/mysql_server | ≤ 5.7.27 | — |
| oracle/mysql_server | ≥ 5.7.28, ≤ 8.0.17 | — |
| oracle/oss_support_tools | all versions | — |