[Git][security-tracker-team/security-tracker][master] Add CVE-2019-5482/curl

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
59ff53e5 by Salvatore Bonaccorso at 2019-09-11T06:43:48Z
Add CVE-2019-5482/curl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -30953,8 +30953,12 @@ CVE-2019-5484
 	RESERVED
 CVE-2019-5483 (Seneca < 3.9.0 contains a vulnerability that could lead to exposing ...)
 	TODO: check
-CVE-2019-5482
+CVE-2019-5482 [TFTP small blocksize heap buffer overflow]
 	RESERVED
+	- curl <unfixed>
+	NOTE: https://curl.haxx.se/docs/CVE-2019-5482.html
+	NOTE: Introduced by: https://github.com/curl/curl/commit/0516ce7786e9500c2e447d48aa9b3f24a6ca70f9
+	NOTE: Fixed by: https://github.com/curl/curl/commit/facb0e4662415b5f28163e853dc6742ac5fafb3d (curl-7_66_0)
 CVE-2019-5481 [FTP-KRB double-free]
 	RESERVED
 	- curl <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/59ff53e5a7f4bca70dd90731f736d9e275661057

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/59ff53e5a7f4bca70dd90731f736d9e275661057
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190911/6e39ee62/attachment.html>