CVE-2019-5436: curl Heap-based Buffer Overflow
CVSS: 7.8v3.1HighModified
AliasesALPINE-CVE-2019-5436SUSE-SU-2019:1357-1SUSE-SU-2019:1357-2SUSE-SU-2019:1363-1SUSE-SU-2019:14064-1SUSE-SU-2019:2009-1RHSA-2020:1020RHSA-2020:2505UBUNTU-CVE-2019-5436USN-3993-1USN-3993-2DEBIAN-CVE-2019-5436DLA-1804-1openSUSE-SU-2019:1508-1
Published 28-05-2019Last modified 14-10-2026
Vulnerability summary
CVE-2019-5436 is a high (CVSS 7.8) Heap-based Buffer Overflow vulnerability in curl. EPSS estimates a 49.74% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
49.74%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 3 · Related 1Timeline
- 28-05-2019PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVSS metrics
8 scores · 6 sources · 3 versionsHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSources6 sources · 7.0–7.8
- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
Medium 4.6Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
49.74%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 49.74% on 18-09-2026
18-09-202618-10-2026
EPSS score49.74%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (curl.haxx.se)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Suse21 products
- curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 7.37.0-70.41.2
- curl&distro=SUSE Enterprise Storage 4< 7.37.0-37.40.1
- curl&distro=SUSE Linux Enterprise Desktop 12 SP3< 7.37.0-37.40.1
- curl&distro=SUSE Linux Enterprise Desktop 12 SP4< 7.60.0-4.6.1
- curl&distro=SUSE Linux Enterprise Module for Basesystem 15< 7.60.0-3.20.1
Opensuse5 products
- leapEOL15.0 | 15.1 | 42.3
- curl-mini&distro=openSUSE Leap 15.0< 7.60.0-lp151.5.3.1
- curl-mini&distro=openSUSE Leap 15.1< 7.60.0-lp151.5.3.1
- curl&distro=openSUSE Leap 15.0< 7.60.0-lp151.5.3.1
- curl&distro=openSUSE Leap 15.1< 7.60.0-lp151.5.3.1
Redhat4 products
- curl< 0:7.29.0-57.el7 | < 0:7.29.0-54.el7_7.3
- curl-debuginfo< 0:7.29.0-57.el7 | < 0:7.29.0-54.el7_7.3
- libcurl< 0:7.29.0-57.el7 | < 0:7.29.0-54.el7_7.3
- libcurl-devel< 0:7.29.0-57.el7 | < 0:7.29.0-54.el7_7.3
Netapp3 products
Oracle3 products
- enterprise_manager_ops_center12.3.3 | 12.4.0
- mysql_server≤ 5.7.27 | ≥ 5.7.28, ≤ 8.0.17
- oss_support_tools20.0
Debian2 products
- curl< 7.38.0-4+deb8u15 | < 7.64.0-4
- debian_linuxEOL9.0 | 10.0
Alpine1 product
- curl< 7.65.0-r0 | < 7.64.0-r2
Curl1 product
- curlFixed in 7.65.0
F51 product
- traffix_signaling_delivery_controller≥ 5.0.0, ≤ 5.1.0
Fedoraproject1 product
- fedoraEOL29
Haxx1 product
- libcurl≥ 7.19.4, ≤ 7.64.1
Ubuntu1 product
- curl< 7.47.0-1ubuntu2.13 | < 7.58.0-2ubuntu3.7 | < 7.35.0-1ubuntu2.20+esm2
12 vendors · 44 products
References
41 links- lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2019/09/11/6Mailing ListX Refsource MLISTPatchThird Party Advisory
- www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlX Refsource MISCPatchThird Party Advisory
- www.oracle.com/security-alerts/cpuoct2020.htmlX Refsource MISC
Show all 41 references
- lists.opensuse.org/archives/…Advisory