[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2020-3916 -- Oracle curl

ID: oval:org.secpod.oval:def:1504470Date: (C)2021-01-10   (M)2023-12-20
Class: PATCHFamily: unix




[7.29.0-59.0.1] - Fix TFTP small blocksize heap buffer overflow [CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers - CVE-2016-8616 case insensitive password comparison - CVE-2016-8617 OOB write via unchecked multiplication - CVE-2016-8618 double-free in curl_maprintf - CVE-2016-8619 double-free in krb5 code - CVE-2016-8621 curl_getdate read out of bounds - CVE-2016-8622 URL unescape heap overflow via integer truncation - CVE-2016-8623 Use-after-free via shared cookies - CVE-2016-8624 invalid URL parsing with # - Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch [7.29.0-59] - http: free protocol-specific struct in setup_connection callback [7.29.0-58] - fix heap buffer overflow in function tftp_receive_packet

Platform:
Oracle Linux 7
Product:
curl
Reference:
ELSA-2020-3916
CVE-2019-5482
CVE    1
CVE-2019-5482

© SecPod Technologies