A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
Un desbordamiento de búfer en la memoria dinámica (heap) del código de recepción TFTP, permite la ejecución de código arbitrario o una Denegación de Servicio (DoS) en las versiones de libcurl 7.19.4 hasta 7.64.1.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:L/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-122
|
| [email protected] | Primary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| haxx | libcurl | * | <built-in method update of dict object at 0x7fd342b3a9c0> | Application |
| opensuse | leap | 15.0 | <built-in method update of dict object at 0x7fd342b38fc0> | Operating System |
| opensuse | leap | 15.1 | <built-in method update of dict object at 0x7fd36067a5c0> | Operating System |
| opensuse | leap | 42.3 | <built-in method update of dict object at 0x7fd3703cc200> | Operating System |
| fedoraproject | fedora | 29 | <built-in method update of dict object at 0x7fd342b3b180> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd342b3bf00> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd36067acc0> | Operating System |
| f5 | traffix_signaling_delivery_controller | * | <built-in method update of dict object at 0x7fd3703cd240> | Application |
| netapp | hci_management_node | - | <built-in method update of dict object at 0x7fd34bb9fc40> | Application |
| netapp | solidfire | - | <built-in method update of dict object at 0x7fd342b39a40> | Application |
| netapp | steelstore_cloud_integrated_storage | - | <built-in method update of dict object at 0x7fd342b3b200> | Application |
| oracle | enterprise_manager_ops_center | 12.3.3 | <built-in method update of dict object at 0x7fd37033dec0> | Application |
| oracle | enterprise_manager_ops_center | 12.4.0 | <built-in method update of dict object at 0x7fd370362ec0> | Application |
| oracle | mysql_server | * | <built-in method update of dict object at 0x7fd342b3bac0> | Application |
| oracle | mysql_server | * | <built-in method update of dict object at 0x7fd342b38b80> | Application |
| oracle | oss_support_tools | 20.0 | <built-in method update of dict object at 0x7fd342b38d00> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:oss_support_tools:20.0:*:*:*:*:*:*:* |