CVE-2019-5435

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...

3.7 LowFix available

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

5.66%Up 3.8 points since Apr 14, 2021

What each source reports

NVD Score used 3.7

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: CVE-2019-5435
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-131, CWE-190
Updated: 2026-11-02

CVE List No score

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: CVE-2019-5435
Weakness: CWE-131
Updated: 2026-11-02

EUVDEUVD-2019-15025 No score

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: EUVD-2019-15025
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fp2w-w5rc-8fxj 3.7

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: GHSA-fp2w-w5rc-8fxj
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-131, CWE-190
Updated: 2026-11-02

OSVALPINE-CVE-2019-5435 3.7

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: ALPINE-CVE-2019-5435
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVBELL-CVE-2019-5435 3.7

CVE-2019-5435 does not affect BellSoft software

Record: BELL-CVE-2019-5435
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

Show 6 moreShow less

OSV 3.7

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: CVE-2019-5435
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-5435 3.7

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

Record: DEBIAN-CVE-2019-5435
CVSS 3.0: 3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2020:4384 9.8

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 security update

Record: RHSA-2020:4384
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCURL-CVE-2019-5435 No score

Integer overflows in URL parser

libcurl contains two integer overflows in the curl_url_set() function that if triggered, can lead to a too small buffer allocation and a subsequent heap buffer overflow.

The flaws only exist on 32-bit architectures and require excessive string input lengths.

Record: CURL-CVE-2019-5435
Updated: 2026-11-02

OSVMGASA-2019-0337 No score

Updated curl packages fix security vulnerabilities

The updated packages fix security vulnerabilities:

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. (CVE-2019-5435)

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1 (CVE-2019-5436).

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3 (CVE-2019-5481).

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3 (CVE-2019-5482).

Record: MGASA-2019-0337
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10582-1 No score

curl-7.79.1-1.1 on GA media

These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10582-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`curl` Alpine:v3.10	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.11	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.12	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.13	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.14	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.15	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.16	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.17	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.18	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.19	7.62.0 up to 7.65.0-r0	7.65.0-r0

Show 121 moreShow less

Affected packages
Package	Affected	Fixed
`curl` Alpine:v3.20	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.21	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.22	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.23	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.24	7.62.0 up to 7.65.0-r0	7.65.0-r0
`curl` Alpine:v3.9	7.62.0 up to 7.64.0-r2	7.64.0-r2
`curl` Debian:12	before 7.64.0-4	7.64.0-4
`curl` Debian:13	before 7.64.0-4	7.64.0-4
`curl` Debian:14	before 7.64.0-4	7.64.0-4
`curl` Mageia:7 From an advisory covering 4 CVEs	before 7.66.0-1.mga7	7.66.0-1.mga7
`jbcs-httpd24-apr` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el6	0:1.6.3-104.jbcs.el6
`jbcs-httpd24-apr-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el6	0:1.6.3-104.jbcs.el6
`jbcs-httpd24-apr-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el6	0:1.6.3-104.jbcs.el6
`jbcs-httpd24-apr-util` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-ldap` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-mysql` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-nss` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-odbc` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-openssl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-pgsql` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-apr-util-sqlite` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el6	0:1.6.1-75.jbcs.el6
`jbcs-httpd24-brotli` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el6	0:1.0.6-38.jbcs.el6
`jbcs-httpd24-brotli-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el6	0:1.0.6-38.jbcs.el6
`jbcs-httpd24-brotli-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el6	0:1.0.6-38.jbcs.el6
`jbcs-httpd24-curl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el6	0:7.64.1-44.jbcs.el6
`jbcs-httpd24-curl-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el6	0:7.64.1-44.jbcs.el6
`jbcs-httpd24-httpd` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-httpd-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-httpd-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-httpd-manual` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-httpd-selinux` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-httpd-tools` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-jansson` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el6	0:2.11-53.jbcs.el6
`jbcs-httpd24-jansson-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el6	0:2.11-53.jbcs.el6
`jbcs-httpd24-jansson-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el6	0:2.11-53.jbcs.el6
`jbcs-httpd24-libcurl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el6	0:7.64.1-44.jbcs.el6
`jbcs-httpd24-libcurl-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el6	0:7.64.1-44.jbcs.el6
`jbcs-httpd24-mod_cluster-native` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.3.14-11.Final_redhat_2.jbcs.el6	0:1.3.14-11.Final_redhat_2.jbcs.el6
`jbcs-httpd24-mod_cluster-native-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.3.14-11.Final_redhat_2.jbcs.el6	0:1.3.14-11.Final_redhat_2.jbcs.el6
`jbcs-httpd24-mod_http2` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.15.7-11.jbcs.el6	0:1.15.7-11.jbcs.el6
`jbcs-httpd24-mod_http2-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.15.7-11.jbcs.el6	0:1.15.7-11.jbcs.el6
`jbcs-httpd24-mod_jk` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el6	0:1.2.48-10.redhat_1.jbcs.el6
`jbcs-httpd24-mod_jk-ap24` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el6	0:1.2.48-10.redhat_1.jbcs.el6
`jbcs-httpd24-mod_jk-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el6	0:1.2.48-10.redhat_1.jbcs.el6
`jbcs-httpd24-mod_jk-manual` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el6	0:1.2.48-10.redhat_1.jbcs.el6
`jbcs-httpd24-mod_ldap` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-mod_md` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:2.0.8-30.jbcs.el6	1:2.0.8-30.jbcs.el6
`jbcs-httpd24-mod_md-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:2.0.8-30.jbcs.el6	1:2.0.8-30.jbcs.el6
`jbcs-httpd24-mod_proxy_html` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:2.4.37-64.jbcs.el6	1:2.4.37-64.jbcs.el6
`jbcs-httpd24-mod_security` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.9.2-57.GA.jbcs.el6	0:2.9.2-57.GA.jbcs.el6
`jbcs-httpd24-mod_security-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.9.2-57.GA.jbcs.el6	0:2.9.2-57.GA.jbcs.el6
`jbcs-httpd24-mod_session` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el6	0:2.4.37-64.jbcs.el6
`jbcs-httpd24-mod_ssl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:2.4.37-64.jbcs.el6	1:2.4.37-64.jbcs.el6
`jbcs-httpd24-nghttp2` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el6	0:1.39.2-34.jbcs.el6
`jbcs-httpd24-nghttp2-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el6	0:1.39.2-34.jbcs.el6
`jbcs-httpd24-nghttp2-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el6	0:1.39.2-34.jbcs.el6
`jbcs-httpd24-openssl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-openssl-debuginfo` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-openssl-devel` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-openssl-libs` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-openssl-perl` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-openssl-static` Red Hat:jboss_core_services:1::el6 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el6	1:1.1.1c-32.jbcs.el6
`jbcs-httpd24-apr` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el7	0:1.6.3-104.jbcs.el7
`jbcs-httpd24-apr-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el7	0:1.6.3-104.jbcs.el7
`jbcs-httpd24-apr-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.3-104.jbcs.el7	0:1.6.3-104.jbcs.el7
`jbcs-httpd24-apr-util` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-ldap` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-mysql` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-nss` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-odbc` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-openssl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-pgsql` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-apr-util-sqlite` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.6.1-75.jbcs.el7	0:1.6.1-75.jbcs.el7
`jbcs-httpd24-brotli` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el7	0:1.0.6-38.jbcs.el7
`jbcs-httpd24-brotli-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el7	0:1.0.6-38.jbcs.el7
`jbcs-httpd24-brotli-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.0.6-38.jbcs.el7	0:1.0.6-38.jbcs.el7
`jbcs-httpd24-curl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el7	0:7.64.1-44.jbcs.el7
`jbcs-httpd24-curl-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el7	0:7.64.1-44.jbcs.el7
`jbcs-httpd24-httpd` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-httpd-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-httpd-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-httpd-manual` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-httpd-selinux` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-httpd-tools` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-jansson` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el7	0:2.11-53.jbcs.el7
`jbcs-httpd24-jansson-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el7	0:2.11-53.jbcs.el7
`jbcs-httpd24-jansson-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.11-53.jbcs.el7	0:2.11-53.jbcs.el7
`jbcs-httpd24-libcurl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el7	0:7.64.1-44.jbcs.el7
`jbcs-httpd24-libcurl-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:7.64.1-44.jbcs.el7	0:7.64.1-44.jbcs.el7
`jbcs-httpd24-mod_cluster-native` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.3.14-11.Final_redhat_2.jbcs.el7	0:1.3.14-11.Final_redhat_2.jbcs.el7
`jbcs-httpd24-mod_cluster-native-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.3.14-11.Final_redhat_2.jbcs.el7	0:1.3.14-11.Final_redhat_2.jbcs.el7
`jbcs-httpd24-mod_http2` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.15.7-11.jbcs.el7	0:1.15.7-11.jbcs.el7
`jbcs-httpd24-mod_http2-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.15.7-11.jbcs.el7	0:1.15.7-11.jbcs.el7
`jbcs-httpd24-mod_jk` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el7	0:1.2.48-10.redhat_1.jbcs.el7
`jbcs-httpd24-mod_jk-ap24` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el7	0:1.2.48-10.redhat_1.jbcs.el7
`jbcs-httpd24-mod_jk-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el7	0:1.2.48-10.redhat_1.jbcs.el7
`jbcs-httpd24-mod_jk-manual` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.2.48-10.redhat_1.jbcs.el7	0:1.2.48-10.redhat_1.jbcs.el7
`jbcs-httpd24-mod_ldap` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-mod_md` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:2.0.8-30.jbcs.el7	1:2.0.8-30.jbcs.el7
`jbcs-httpd24-mod_md-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:2.0.8-30.jbcs.el7	1:2.0.8-30.jbcs.el7
`jbcs-httpd24-mod_proxy_html` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:2.4.37-64.jbcs.el7	1:2.4.37-64.jbcs.el7
`jbcs-httpd24-mod_security` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.9.2-57.GA.jbcs.el7	0:2.9.2-57.GA.jbcs.el7
`jbcs-httpd24-mod_security-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.9.2-57.GA.jbcs.el7	0:2.9.2-57.GA.jbcs.el7
`jbcs-httpd24-mod_session` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:2.4.37-64.jbcs.el7	0:2.4.37-64.jbcs.el7
`jbcs-httpd24-mod_ssl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:2.4.37-64.jbcs.el7	1:2.4.37-64.jbcs.el7
`jbcs-httpd24-nghttp2` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el7	0:1.39.2-34.jbcs.el7
`jbcs-httpd24-nghttp2-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el7	0:1.39.2-34.jbcs.el7
`jbcs-httpd24-nghttp2-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.39.2-34.jbcs.el7	0:1.39.2-34.jbcs.el7
`jbcs-httpd24-openssl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`jbcs-httpd24-openssl-chil` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.0.0-1.jbcs.el7	0:1.0.0-1.jbcs.el7
`jbcs-httpd24-openssl-chil-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 0:1.0.0-1.jbcs.el7	0:1.0.0-1.jbcs.el7
`jbcs-httpd24-openssl-debuginfo` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`jbcs-httpd24-openssl-devel` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`jbcs-httpd24-openssl-libs` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`jbcs-httpd24-openssl-perl` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`jbcs-httpd24-openssl-static` Red Hat:jboss_core_services:1::el7 From an advisory covering 5 CVEs	before 1:1.1.1c-32.jbcs.el7	1:1.1.1c-32.jbcs.el7
`curl` openSUSE:Tumbleweed From an advisory covering 48 CVEs	before 7.79.1-1.1	7.79.1-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-5435 is a low vulnerability (CVSS 3.7) in Curl, published May 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.66%, the 93rd percentile. Fixed in curl 7.65.0-r0.

References

Show 89 moreShow less