Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5b1b79c8 by Salvatore Bonaccorso at 2019-05-22T07:36:40Z
Add CVE-2019-5436/curl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17636,8 +17636,12 @@ CVE-2019-5438 (Path traversal using symlink in npm
harp module versions <= 0.
TODO: check
CVE-2019-5437 (Information exposure through the directory listing in npm's
harp modul ...)
TODO: check
-CVE-2019-5436
+CVE-2019-5436 [TFTP receive buffer overflow]
RESERVED
+ - curl <unfixed>
+ NOTE: https://curl.haxx.se/docs/CVE-2019-5436.html
+ NOTE: Introduced by: https://github.com/curl/curl/commit/0516ce7786e95
+ NOTE: Fixed by:
https://github.com/curl/curl/commit/2576003415625d7b5f0e390902f8097830b82275
CVE-2019-5435
RESERVED
CVE-2019-5434 (An attacker could send a specifically crafted payload to the
XML-RPC i ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5b1b79c829286fc4da81cef9c6f4307a69e0f3a3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5b1b79c829286fc4da81cef9c6f4307a69e0f3a3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
