cve/2019/CVE-2019-5436.md

CVE-2019-5436

Description

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

POC

Reference

• https://hackerone.com/reports/550696
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpuoct2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Github

• https://github.com/fokypoky/places-list