rpm package
suse/curl&distro=SUSE Enterprise Storage 5
pkg:rpm/suse/curl&distro=SUSE%20Enterprise%20Storage%205
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-8177 | Hig | 7.8 | < 7.37.0-37.47.1 | 7.37.0-37.47.1 | Dec 14, 2020 | curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used. | |
| CVE-2019-5482 | Cri | 9.8 | < 7.37.0-37.43.1 | 7.37.0-37.43.1 | Sep 16, 2019 | Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. |
- affected < 7.37.0-37.47.1fixed 7.37.0-37.47.1
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
- affected < 7.37.0-37.43.1fixed 7.37.0-37.43.1
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.