Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Un desbordamiento del búfer de la pila en el manejador de protocolo TFTP en cURL versiones 7.19.4 hasta 7.65.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-122
|
| [email protected] | Primary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| haxx | curl | * | <built-in method update of dict object at 0x7fd3854bc1c0> | Application |
| fedoraproject | fedora | 29 | <built-in method update of dict object at 0x7fd38551fdc0> | Operating System |
| fedoraproject | fedora | 30 | <built-in method update of dict object at 0x7fd36b155a80> | Operating System |
| fedoraproject | fedora | 31 | <built-in method update of dict object at 0x7fd3686c2c80> | Operating System |
| opensuse | leap | 15.0 | <built-in method update of dict object at 0x7fd3854bf700> | Operating System |
| opensuse | leap | 15.1 | <built-in method update of dict object at 0x7fd3854be140> | Operating System |
| netapp | cloud_backup | - | <built-in method update of dict object at 0x7fd3408921c0> | Application |
| netapp | oncommand_insight | - | <built-in method update of dict object at 0x7fd38551e600> | Application |
| netapp | oncommand_unified_manager | * | <built-in method update of dict object at 0x7fd3854bfc80> | Application |
| netapp | oncommand_unified_manager | * | <built-in method update of dict object at 0x7fd3854bc5c0> | Application |
| netapp | oncommand_workflow_automation | - | <built-in method update of dict object at 0x7fd37039b180> | Application |
| netapp | snapcenter | - | <built-in method update of dict object at 0x7fd38551f280> | Application |
| netapp | steelstore_cloud_integrated_storage | - | <built-in method update of dict object at 0x7fd36ada2b00> | Application |
| oracle | communications_operations_monitor | 3.4 | <built-in method update of dict object at 0x7fd38477ea00> | Application |
| oracle | communications_operations_monitor | 4.0 | <built-in method update of dict object at 0x7fd39c4a4980> | Application |
| oracle | communications_operations_monitor | 4.1 | <built-in method update of dict object at 0x7fd3854be700> | Application |
| oracle | communications_operations_monitor | 4.2 | <built-in method update of dict object at 0x7fd3854bde40> | Application |
| oracle | communications_operations_monitor | 4.3 | <built-in method update of dict object at 0x7fd340be5cc0> | Application |
| oracle | communications_session_border_controller | 8.3 | <built-in method update of dict object at 0x7fd3854bdd40> | Application |
| oracle | communications_session_border_controller | 8.4 | <built-in method update of dict object at 0x7fd340891680> | Application |
| oracle | enterprise_manager_ops_center | 12.3.3 | <built-in method update of dict object at 0x7fd38551e480> | Application |
| oracle | enterprise_manager_ops_center | 12.4.0 | <built-in method update of dict object at 0x7fd38551d140> | Application |
| oracle | http_server | 12.2.1.3.0 | <built-in method update of dict object at 0x7fd36a655640> | Application |
| oracle | http_server | 12.2.1.4.0 | <built-in method update of dict object at 0x7fd38551e180> | Application |
| oracle | hyperion_essbase | 11.1.2.4 | <built-in method update of dict object at 0x7fd340892d80> | Application |
| oracle | mysql_server | * | <built-in method update of dict object at 0x7fd36a7ec140> | Application |
| oracle | mysql_server | * | <built-in method update of dict object at 0x7fd38551e0c0> | Application |
| oracle | oss_support_tools | 20.0 | <built-in method update of dict object at 0x7fd340892c40> | Application |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd3844a08c0> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd3844a1f40> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vmware_vsphere:*:* |
| Yes | cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_operations_monitor:4.1:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_operations_monitor:4.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_session_border_controller:8.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:hyperion_essbase:11.1.2.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:oss_support_tools:20.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |