curl: double free due to subsequent call of realloc()
Published Sep 16, 2019
9.8
CRITICALCVSS 3.1
EPSS 7.46%
Description
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
Affected products
- Vendor n/a Product Curl Defaultn/a
- Version 7.52.0 to 7.65.3StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Curl | n/a |
|
Configuration 2
- 29
- 30
- 31
Configuration 3
- n/a
- n/a
Configuration 4
Running on/with
- n/a
Configuration 5
- 3.4
- 4.0
- 4.1
- 4.2
- 4.3
- 8.3
- 8.4
- 12.3.3
- 12.4.0
- ≥ 5.7.0 · ≤ 5.7.28
- ≥ 8.0.0 · ≤ 8.0.18
- 20.0
Configuration 6
- 9.0
- 10.0
No data.
JBoss Core Services on RHEL 6
jbcs-httpd24-apr-0:1.6.3-73.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-curl-0:7.64.1-21.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-jansson-0:2.11-24.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-apr-0:1.6.3-73.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-curl-0:7.64.1-21.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-jansson-0:2.11-24.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el7
Fixed · RHSA-2020:0250
Red Hat Enterprise Linux 8
curl-0:7.61.1-12.el8
Fixed · RHSA-2020:1792
.NET Core 2.1 on Red Hat Enterprise Linux
rh-dotnet21-curl
Not affected
.NET Core 2.2 on Red Hat Enterprise Linux
rh-dotnet22-curl
Not affected
Red Hat Enterprise Linux 5
curl
Not affected
Red Hat Enterprise Linux 6
curl
Not affected
Red Hat Enterprise Linux 7
curl
Not affected
Red Hat JBoss Web Server 5
curl
Not affected
Red Hat Software Collections
httpd24-curl
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| JBoss Core Services on RHEL 6 | jbcs-httpd24-apr-0:1.6.3-73.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-curl-0:7.64.1-21.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-jansson-0:2.11-24.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-apr-0:1.6.3-73.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-curl-0:7.64.1-21.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-jansson-0:2.11-24.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el7 | Fixed | RHSA-2020:0250 |
| Red Hat Enterprise Linux 8 | curl-0:7.61.1-12.el8 | Fixed | RHSA-2020:1792 |
| .NET Core 2.1 on Red Hat Enterprise Linux | rh-dotnet21-curl | Not affected | n/a |
| .NET Core 2.2 on Red Hat Enterprise Linux | rh-dotnet22-curl | Not affected | n/a |
| Red Hat Enterprise Linux 5 | curl | Not affected | n/a |
| Red Hat Enterprise Linux 6 | curl | Not affected | n/a |
| Red Hat Enterprise Linux 7 | curl | Not affected | n/a |
| Red Hat JBoss Web Server 5 | curl | Not affected | n/a |
| Red Hat Software Collections | httpd24-curl | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
AV:N/AC:L/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Apr 16, 2026 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (56 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 7.46% (0.07465) | 94.28th | v5 (v2026.06.15) |
| Jun 15, 2026 | 7.27% (0.07266) | 93.53th | v5 (v2026.06.15) |
| Apr 12, 2026 | 3.02% (0.03017) | 86.62th | v4 (v2025.03.14) |
| Mar 4, 2026 | 4.69% (0.04691) | 89.14th | v4 (v2025.03.14) |
| Mar 1, 2026 | 2.44% (0.02443) | 84.98th | v4 (v2025.03.14) |
| Feb 4, 2026 | 4.69% (0.04691) | 89.08th | v4 (v2025.03.14) |
| Feb 1, 2026 | 2.44% (0.02443) | 84.88th | v4 (v2025.03.14) |
| Jan 4, 2026 | 4.69% (0.04691) | 89.00th | v4 (v2025.03.14) |
| Jan 1, 2026 | 2.44% (0.02443) | 84.83th | v4 (v2025.03.14) |
| Dec 4, 2025 | 4.69% (0.04691) | 88.93th | v4 (v2025.03.14) |
| Dec 1, 2025 | 2.44% (0.02443) | 84.75th | v4 (v2025.03.14) |
| Nov 21, 2025 | 4.69% (0.04691) | 88.87th | v4 (v2025.03.14) |
| Nov 18, 2025 | 23.53% (0.23533) | 95.62th | v4 (v2025.03.14) |
| Nov 4, 2025 | 4.69% (0.04691) | 88.84th | v4 (v2025.03.14) |
| Nov 1, 2025 | 2.44% (0.02443) | 84.70th | v4 (v2025.03.14) |
| Oct 4, 2025 | 4.69% (0.04691) | 88.87th | v4 (v2025.03.14) |
| Oct 1, 2025 | 2.44% (0.02443) | 84.68th | v4 (v2025.03.14) |
| Sep 4, 2025 | 4.69% (0.04691) | 88.94th | v4 (v2025.03.14) |
| Sep 1, 2025 | 2.44% (0.02443) | 84.68th | v4 (v2025.03.14) |
| Aug 4, 2025 | 4.69% (0.04691) | 88.95th | v4 (v2025.03.14) |
| Aug 1, 2025 | 2.44% (0.02443) | 84.65th | v4 (v2025.03.14) |
| Jul 5, 2025 | 4.79% (0.04790) | 88.99th | v4 (v2025.03.14) |
| Jul 1, 2025 | 2.13% (0.02130) | 83.46th | v4 (v2025.03.14) |
| Jun 5, 2025 | 4.79% (0.04790) | 88.93th | v4 (v2025.03.14) |
| Jun 1, 2025 | 2.44% (0.02443) | 84.44th | v4 (v2025.03.14) |
| May 14, 2025 | 4.79% (0.04790) | 88.88th | v4 (v2025.03.14) |
| May 13, 2025 | 2.44% (0.02443) | 84.30th | v4 (v2025.03.14) |
| May 12, 2025 | 4.79% (0.04790) | 88.87th | v4 (v2025.03.14) |
| May 9, 2025 | 2.44% (0.02443) | 84.30th | v4 (v2025.03.14) |
| May 4, 2025 | 4.79% (0.04790) | 88.85th | v4 (v2025.03.14) |
| May 1, 2025 | 2.44% (0.02443) | 84.33th | v4 (v2025.03.14) |
| Apr 12, 2025 | 5.71% (0.05706) | 89.56th | v4 (v2025.03.14) |
| Apr 11, 2025 | 2.44% (0.02443) | 83.86th | v4 (v2025.03.14) |
| Apr 2, 2025 | 5.71% (0.05706) | 89.52th | v4 (v2025.03.14) |
| Apr 1, 2025 | 2.44% (0.02443) | 83.78th | v4 (v2025.03.14) |
| Mar 30, 2025 | 5.59% (0.05590) | 89.36th | v4 (v2025.03.14) |
| Mar 29, 2025 | 11.56% (0.11562) | 89.35th | v4 (v2025.03.14) |
| Mar 17, 2025 | 6.33% (0.06333) | 90.28th | v4 (v2025.03.14) |
| Dec 17, 2024 | 2.87% (0.02873) | 90.48th | v3 (v2023.03.01) |
| Dec 12, 2024 | 1.58% (0.01584) | 87.84th | v3 (v2023.03.01) |
| Jan 10, 2024 | 1.17% (0.01173) | 83.45th | v3 (v2023.03.01) |
| Nov 8, 2023 | 1.19% (0.01189) | 83.49th | v3 (v2023.03.01) |
| Aug 23, 2023 | 2.37% (0.02369) | 88.44th | v3 (v2023.03.01) |
| Aug 7, 2023 | 2.08% (0.02082) | 87.62th | v3 (v2023.03.01) |
| Jul 21, 2023 | 2.17% (0.02166) | 87.84th | v3 (v2023.03.01) |
| Jul 8, 2023 | 1.85% (0.01846) | 86.70th | v3 (v2023.03.01) |
| May 8, 2023 | 1.71% (0.01712) | 85.92th | v3 (v2023.03.01) |
| Mar 30, 2023 | 1.85% (0.01846) | 86.50th | v3 (v2023.03.01) |
| Mar 7, 2023 | 1.24% (0.01242) | 83.34th | v3 (v2023.03.01) |
| Mar 6, 2023 | 2.69% (0.02686) | 82.85th | v2 (v2022.01.01) |
| Apr 1, 2022 | 2.69% (0.02686) | 81.17th | v2 (v2022.01.01) |
| Feb 4, 2022 | 24.56% (0.24563) | 95.26th | v2 (v2022.01.01) |
| Feb 3, 2022 | 11.74% (0.11741) | 88.45th | v1 |
| Jan 6, 2022 | 11.74% (0.11741) | 88.31th | v1 |
| Sep 1, 2021 | 2.88% (0.02880) | 80.71th | v1 |
| Apr 14, 2021 | 2.88% (0.02880) | 0.00th | v1 |
References (17)
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2019-5481 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1749402 Issue Tracking
- https://curl.haxx.se/docs/CVE-2019-5481.html x_refsource_CONFIRMVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/ vendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2019-5481
- https://seclists.org/bugtraq/2020/Feb/36 mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202003-29 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://security.netapp.com/advisory/ntap-20191004-0003/ x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-5481
- https://www.debian.org/security/2020/dsa-4633 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISCPatchThird Party Advisory
Change history (0)
No recorded changes yet.