Описание
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| curl | fixed | 7.64.0-4 | package | |
| curl | not-affected | stretch | package | |
| curl | not-affected | jessie | package |
Примечания
https://curl.haxx.se/docs/CVE-2019-5435.html
Introduced by: https://github.com/curl/curl/commit/fb30ac5a2d63773c52
Fixed by: https://github.com/curl/curl/commit/5fc28510a4664f4
Связанные уязвимости
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
Уязвимость функции curl_url_set() библиотеки libcurl, позволяющая нарушителю вызвать отказ в обслуживании