alpine · CVE-2019-5481

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2019-5481: 2 source package rows (curl, gnurl); 82 state rows across 12 repos (3.10-main, 3.11-main, 3.12-main, 3.17-community, 3.17-main, 3.18-main, 3.19-main, 3.20-main, 3.21-main, 3.22-main, edge-community, edge-main); fixed 12, open 70.

Description:

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.