CVE-2019-15601
CURL before 7.68.0 lacks proper input validation, which allows users to create a `FILE:` URL that...
CVE-2019-15601 has been rejected by its source and should not be treated as a live vulnerability, published January 6, 2020.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Affected packages
| Package | Affected | Fixed |
|---|---|---|
curlopenSUSE:Tumbleweed From an advisory covering 48 CVEs | before 7.79.1-1.1 | 7.79.1-1.1 |
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2019-15601- Updated
- 2026-11-02
EUVDEUVD-2019-6563No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2019-6563- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rm52-5ph7-9w5wNo score
CURL before 7.68.0 lacks proper input validation, which allows users to create a `FILE:` URL that...
CURL before 7.68.0 lacks proper input validation, which allows users to create a FILE: URL that can make the client access a remote file using SMB (Windows-only issue).
- Record
GHSA-rm52-5ph7-9w5w- Updated
- 2026-11-02
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2019-15601- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10582-1No score
curl-7.79.1-1.1 on GA media
These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10582-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
nvd.nist.gov/vuln/detail/CVE-2019-15601
hackerone.com/reports/726117
security.netapp.com/advisory/ntap-20200127-0002
openwall.com/lists/oss-security/2020/01/08/1
github.com/advisories/GHSA-rm52-5ph7-9w5w
suse.com/security/cve/CVE-2006-1061
Show 47 moreShow less