CURL-CVE-2019-5435
See a problem?- Source
- https://curl.se/docs/CVE-2019-5435.html
- Import Source
- https://curl.se/docs/CURL-CVE-2019-5435.json
- JSON Data
- https://api.osv.dev/v1/vulns/CURL-CVE-2019-5435
- Aliases
- Published
- 2019-05-22T08:00:00Z
- Modified
- 2024-01-25T02:42:48.739029Z
- Summary
- Integer overflows in URL parser
- Details
-
libcurl contains two integer overflows in the
curl_url_set()function that if triggered, can lead to a too small buffer allocation and a subsequent heap buffer overflow.The flaws only exist on 32 bit architectures and require excessive string input lengths.
- References
-
- Credits
-
-
- Wenchao Li - FINDER
-
- Daniel Stenberg - REMEDIATION_DEVELOPER
-