USN-3993-1

Dashboard / Vulnerabilities / USN-3993-1

USN-3993-1

Summary: curl vulnerabilities

Details: Wenchao Li discovered that curl incorrectly handled memory in the curl_url_set() function. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.04. (CVE-2019-5435) It was discovered that curl incorrectly handled memory when receiving data from a TFTP server. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-5436)

References: https://ubuntu.com/security/notices/USN-3993-1, https://ubuntu.com/security/CVE-2019-5435, https://ubuntu.com/security/CVE-2019-5436