curl: heap buffer overflow in function tftp_receive_packet()
Published Sep 16, 2019
9.8
CRITICALCVSS 3.1
EPSS 17.94%
Description
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
Affected products
- Vendor n/a Product Curl Defaultn/a
- Version 7.19.4 to 7.65.3StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Curl | n/a |
|
Configuration 2
- 29
- 30
- 31
Configuration 4
- n/a
- n/a
- ≥ 7.3
- ≥ 9.5
- n/a
- n/a
- n/a
Configuration 5
- 3.4
- 4.0
- 4.1
- 4.2
- 4.3
- 8.3
- 8.4
- 12.3.3
- 12.4.0
- 12.2.1.3.0
- 12.2.1.4.0
- 11.1.2.4
- ≥ 5.0.0 · ≤ 5.7.28
- ≥ 8.0.0 · ≤ 8.0.18
- 20.0
Configuration 6
- 9.0
- 10.0
No data.
JBoss Core Services on RHEL 6
jbcs-httpd24-apr-0:1.6.3-73.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-curl-0:7.64.1-21.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-jansson-0:2.11-24.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 6
jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el6
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-apr-0:1.6.3-73.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-curl-0:7.64.1-21.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-jansson-0:2.11-24.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el7
Fixed · RHSA-2020:0250
JBoss Core Services on RHEL 7
jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el7
Fixed · RHSA-2020:0250
Red Hat Enterprise Linux 7
curl-0:7.29.0-59.el7
Fixed · RHSA-2020:3916
Red Hat Enterprise Linux 7.4 Advanced Update Support
curl-0:7.29.0-42.el7_4.3
Fixed · RHSA-2021:0759
Red Hat Enterprise Linux 7.4 Telco Extended Update Support
curl-0:7.29.0-42.el7_4.3
Fixed · RHSA-2021:0759
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions
curl-0:7.29.0-42.el7_4.3
Fixed · RHSA-2021:0759
Red Hat Enterprise Linux 7.6 Extended Update Support
curl-0:7.29.0-51.el7_6.4
Fixed · RHSA-2021:0877
Red Hat Enterprise Linux 7.7 Extended Update Support
curl-0:7.29.0-54.el7_7.4
Fixed · RHSA-2021:1027
Red Hat Enterprise Linux 8
curl-0:7.61.1-12.el8
Fixed · RHSA-2020:1792
Red Hat OpenShift Do
openshiftdo/odo-init-image-rhel7:1.1.3-2
Fixed · RHSA-2021:0949
.NET Core 2.1 on Red Hat Enterprise Linux
rh-dotnet21-curl
Not affected
.NET Core 2.2 on Red Hat Enterprise Linux
rh-dotnet22-curl
Not affected
Red Hat Enterprise Linux 5
curl
Not affected
Red Hat Enterprise Linux 6
curl
Out of support scope
Red Hat JBoss Web Server 5
curl
Not affected
Red Hat Software Collections
httpd24-curl
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| JBoss Core Services on RHEL 6 | jbcs-httpd24-apr-0:1.6.3-73.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-curl-0:7.64.1-21.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-jansson-0:2.11-24.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 6 | jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el6 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-apr-0:1.6.3-73.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-apr-util-0:1.6.1-54.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-brotli-0:1.0.6-9.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-curl-0:7.64.1-21.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-httpd-0:2.4.37-41.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-jansson-0:2.11-24.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_cluster-native-0:1.3.12-13.Final_redhat_2.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_http2-0:1.11.3-8.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_jk-0:1.2.46-26.redhat_1.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_md-1:2.0.8-10.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-mod_security-0:2.9.2-20.GA.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-nghttp2-0:1.39.2-10.jbcs.el7 | Fixed | RHSA-2020:0250 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-openssl-1:1.1.1c-4.jbcs.el7 | Fixed | RHSA-2020:0250 |
| Red Hat Enterprise Linux 7 | curl-0:7.29.0-59.el7 | Fixed | RHSA-2020:3916 |
| Red Hat Enterprise Linux 7.4 Advanced Update Support | curl-0:7.29.0-42.el7_4.3 | Fixed | RHSA-2021:0759 |
| Red Hat Enterprise Linux 7.4 Telco Extended Update Support | curl-0:7.29.0-42.el7_4.3 | Fixed | RHSA-2021:0759 |
| Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions | curl-0:7.29.0-42.el7_4.3 | Fixed | RHSA-2021:0759 |
| Red Hat Enterprise Linux 7.6 Extended Update Support | curl-0:7.29.0-51.el7_6.4 | Fixed | RHSA-2021:0877 |
| Red Hat Enterprise Linux 7.7 Extended Update Support | curl-0:7.29.0-54.el7_7.4 | Fixed | RHSA-2021:1027 |
| Red Hat Enterprise Linux 8 | curl-0:7.61.1-12.el8 | Fixed | RHSA-2020:1792 |
| Red Hat OpenShift Do | openshiftdo/odo-init-image-rhel7:1.1.3-2 | Fixed | RHSA-2021:0949 |
| .NET Core 2.1 on Red Hat Enterprise Linux | rh-dotnet21-curl | Not affected | n/a |
| .NET Core 2.2 on Red Hat Enterprise Linux | rh-dotnet22-curl | Not affected | n/a |
| Red Hat Enterprise Linux 5 | curl | Not affected | n/a |
| Red Hat Enterprise Linux 6 | curl | Out of support scope | n/a |
| Red Hat JBoss Web Server 5 | curl | Not affected | n/a |
| Red Hat Software Collections | httpd24-curl | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat mitigation
Do not use TFTP with curl with smaller than the default BLKSIZE.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AV:N/AC:L/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Apr 15, 2026 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (60 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 17.94% (0.17939) | 97.10th | v5 (v2026.06.15) |
| Jun 15, 2026 | 17.94% (0.17939) | 96.80th | v5 (v2026.06.15) |
| Jun 12, 2026 | 8.33% (0.08332) | 92.50th | v4 (v2025.03.14) |
| May 13, 2026 | 9.71% (0.09715) | 93.01th | v4 (v2025.03.14) |
| May 2, 2026 | 8.54% (0.08540) | 92.41th | v4 (v2025.03.14) |
| Apr 12, 2026 | 6.91% (0.06912) | 91.40th | v4 (v2025.03.14) |
| Mar 4, 2026 | 8.33% (0.08332) | 92.12th | v4 (v2025.03.14) |
| Mar 1, 2026 | 5.80% (0.05803) | 90.39th | v4 (v2025.03.14) |
| Feb 4, 2026 | 8.33% (0.08332) | 92.06th | v4 (v2025.03.14) |
| Feb 1, 2026 | 5.80% (0.05803) | 90.33th | v4 (v2025.03.14) |
| Jan 4, 2026 | 8.33% (0.08332) | 91.99th | v4 (v2025.03.14) |
| Jan 1, 2026 | 5.80% (0.05803) | 90.28th | v4 (v2025.03.14) |
| Dec 4, 2025 | 8.33% (0.08332) | 91.93th | v4 (v2025.03.14) |
| Dec 1, 2025 | 5.80% (0.05803) | 90.20th | v4 (v2025.03.14) |
| Nov 30, 2025 | 8.33% (0.08332) | 91.93th | v4 (v2025.03.14) |
| Nov 21, 2025 | 10.79% (0.10791) | 93.04th | v4 (v2025.03.14) |
| Nov 18, 2025 | 78.45% (0.78451) | 99.11th | v4 (v2025.03.14) |
| Nov 4, 2025 | 10.79% (0.10791) | 93.01th | v4 (v2025.03.14) |
| Nov 1, 2025 | 6.61% (0.06608) | 90.79th | v4 (v2025.03.14) |
| Oct 4, 2025 | 10.79% (0.10791) | 93.05th | v4 (v2025.03.14) |
| Oct 1, 2025 | 6.61% (0.06608) | 90.84th | v4 (v2025.03.14) |
| Sep 4, 2025 | 10.79% (0.10791) | 93.09th | v4 (v2025.03.14) |
| Sep 1, 2025 | 6.61% (0.06608) | 90.86th | v4 (v2025.03.14) |
| Aug 4, 2025 | 10.79% (0.10791) | 93.05th | v4 (v2025.03.14) |
| Aug 1, 2025 | 6.61% (0.06608) | 90.86th | v4 (v2025.03.14) |
| Jul 4, 2025 | 10.79% (0.10791) | 93.01th | v4 (v2025.03.14) |
| Jul 1, 2025 | 6.61% (0.06608) | 90.77th | v4 (v2025.03.14) |
| Jun 7, 2025 | 10.79% (0.10791) | 92.96th | v4 (v2025.03.14) |
| Jun 1, 2025 | 6.61% (0.06608) | 90.71th | v4 (v2025.03.14) |
| May 5, 2025 | 10.79% (0.10791) | 92.92th | v4 (v2025.03.14) |
| May 1, 2025 | 6.61% (0.06608) | 90.69th | v4 (v2025.03.14) |
| Apr 9, 2025 | 10.79% (0.10791) | 92.68th | v4 (v2025.03.14) |
| Apr 8, 2025 | 6.61% (0.06608) | 90.31th | v4 (v2025.03.14) |
| Apr 6, 2025 | 10.79% (0.10791) | 92.68th | v4 (v2025.03.14) |
| Apr 4, 2025 | 6.61% (0.06608) | 90.31th | v4 (v2025.03.14) |
| Mar 30, 2025 | 10.79% (0.10791) | 92.68th | v4 (v2025.03.14) |
| Mar 29, 2025 | 15.47% (0.15474) | 91.14th | v4 (v2025.03.14) |
| Mar 28, 2025 | 10.79% (0.10791) | 92.69th | v4 (v2025.03.14) |
| Mar 27, 2025 | 6.61% (0.06608) | 89.85th | v4 (v2025.03.14) |
| Mar 23, 2025 | 11.05% (0.11050) | 92.41th | v4 (v2025.03.14) |
| Mar 22, 2025 | 6.78% (0.06777) | 90.51th | v4 (v2025.03.14) |
| Mar 17, 2025 | 11.05% (0.11050) | 92.92th | v4 (v2025.03.14) |
| Dec 17, 2024 | 6.16% (0.06158) | 93.47th | v3 (v2023.03.01) |
| Dec 12, 2024 | 9.38% (0.09381) | 94.98th | v3 (v2023.03.01) |
| Jan 10, 2024 | 9.76% (0.09761) | 94.26th | v3 (v2023.03.01) |
| Nov 8, 2023 | 9.88% (0.09878) | 94.25th | v3 (v2023.03.01) |
| Aug 7, 2023 | 12.42% (0.12422) | 94.67th | v3 (v2023.03.01) |
| Jul 21, 2023 | 16.58% (0.16576) | 95.31th | v3 (v2023.03.01) |
| Jul 6, 2023 | 13.03% (0.13025) | 94.73th | v3 (v2023.03.01) |
| Jun 3, 2023 | 20.14% (0.20141) | 95.60th | v3 (v2023.03.01) |
| Apr 30, 2023 | 15.91% (0.15911) | 95.10th | v3 (v2023.03.01) |
| Mar 26, 2023 | 13.86% (0.13861) | 94.74th | v3 (v2023.03.01) |
| Mar 7, 2023 | 15.06% (0.15057) | 94.90th | v3 (v2023.03.01) |
| Mar 6, 2023 | 2.69% (0.02686) | 82.85th | v2 (v2022.01.01) |
| Apr 1, 2022 | 2.69% (0.02686) | 81.17th | v2 (v2022.01.01) |
| Feb 4, 2022 | 24.56% (0.24563) | 95.26th | v2 (v2022.01.01) |
| Feb 3, 2022 | 12.48% (0.12481) | 88.86th | v1 |
| Jan 6, 2022 | 12.48% (0.12481) | 88.73th | v1 |
| Sep 1, 2021 | 3.08% (0.03080) | 81.27th | v1 |
| Apr 14, 2021 | 3.08% (0.03080) | 0.00th | v1 |
References (18)
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2019-5482 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1749652 Issue Tracking
- https://curl.haxx.se/docs/CVE-2019-5482.html x_refsource_CONFIRMVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/ vendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2019-5482
- https://seclists.org/bugtraq/2020/Feb/36 mailing-listx_refsource_BUGTRAQMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202003-29 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://security.netapp.com/advisory/ntap-20191004-0003/ x_refsource_CONFIRMThird Party Advisory
- https://security.netapp.com/advisory/ntap-20200416-0003/ x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-5482
- https://www.debian.org/security/2020/dsa-4633 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISCPatchThird Party Advisory
Change history (0)
No recorded changes yet.