suse · CVE-2019-5481

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2019-5481 severity moderate: SUSE including 355 source package names (0.1.0:libcurl4-7.60.0-3.23.1, 0.1.75:libcurl4-7.60.0-3.23.1, …), 410 product×package rows across 83 product lines (Container caasp/v4/389-ds, Container caasp/v4/busybox, … (83 product lines)): Fixed 220, Known Affected 157, Known Not Affected 33.

Description:

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.