{"id":"CVE-2019-5482","aliases":["ALPINE-CVE-2019-5482","BELL-CVE-2019-5482","CLSA-2026-1778223262","CURL-CVE-2019-5482","DEBIAN-CVE-2019-5482","DLA-1917-1","DSA-4633-1","EUVD-2019-15060","GHSA-35cc-32cj-vr6g","MGASA-2019-0337","RHSA-2020:0250","RHSA-2020:1792","RHSA-2020:3916","RHSA-2021:0759","RHSA-2021:0877","RHSA-2021:1027","SUSE-SU-2019:14172-1","SUSE-SU-2019:2339-2","SUSE-SU-2019:2373-1","SUSE-SU-2019:2381-1","UBUNTU-CVE-2019-5482","USN-4129-1","USN-4129-2","openSUSE-SU-2019:2149-1","openSUSE-SU-2019:2169-1","openSUSE-SU-2024:10582-1"],"status":"published","title":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.17939,"percentile":0.97199,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2019-09-11T00:00:00Z","modified":"2026-11-03T06:31:58Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"curl","fixed_in":["7.61.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"curl","fixed_in":["7.61.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"curl","fixed_in":["7.64.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gnurl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gnurl","fixed_in":["7.66.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"curl","fixed_in":["7.66.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["7.66.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["7.66.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"curl","fixed_in":["7.38.0-4+deb8u16"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl-debuginfo","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl-devel","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl-debuginfo","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl-devel","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl-devel","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl-debuginfo","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl-devel","fixed_in":["0:7.29.0-59.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl-devel","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl-devel","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl-devel","fixed_in":["0:7.29.0-42.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"curl","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"curl-debuginfo","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libcurl","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libcurl-devel","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"curl","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libcurl","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libcurl-devel","fixed_in":["0:7.29.0-51.el7_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"curl","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"curl-debuginfo","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"libcurl","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"libcurl-devel","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"curl","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"curl-debuginfo","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"libcurl","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"libcurl-devel","fixed_in":["0:7.29.0-54.el7_7.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"curl-openssl1","fixed_in":["7.37.0-70.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"curl","fixed_in":["7.37.0-70.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"curl","fixed_in":["7.37.0-70.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"curl","fixed_in":["7.37.0-37.43.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","fixed_in":["7.35.0-1ubuntu2.20+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"curl","fixed_in":["7.47.0-1ubuntu2.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"curl","fixed_in":["7.58.0-2ubuntu3.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.61.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.61.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.19.4"},{"fixed":"7.64.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gnurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gnurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.19.7-59.el6.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.19.7-59.el6.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.19.7-59.el6.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.38.0-4+deb8u16"}]}],"versions":["7.38.0-4","7.38.0-4+deb8u1","7.38.0-4+deb8u10","7.38.0-4+deb8u11","7.38.0-4+deb8u12","7.38.0-4+deb8u13","7.38.0-4+deb8u14","7.38.0-4+deb8u15","7.38.0-4+deb8u2","7.38.0-4+deb8u3","7.38.0-4+deb8u4","7.38.0-4+deb8u5","7.38.0-4+deb8u6","7.38.0-4+deb8u7","7.38.0-4+deb8u8","7.38.0-4+deb8u9"]},{"source":"osv","ecosystem":"Debian:9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.52.1-5+deb9u10"}]}],"versions":["7.52.1-5","7.52.1-5+deb9u1","7.52.1-5+deb9u2","7.52.1-5+deb9u3","7.52.1-5+deb9u4","7.52.1-5+deb9u5","7.52.1-5+deb9u6","7.52.1-5+deb9u7","7.52.1-5+deb9u8","7.52.1-5+deb9u9"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u1"}]}],"versions":["7.64.0-4"],"bundled":2},{"source":"osv","ecosystem":"Mageia:7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.66.0-1.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-brotli-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-jansson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-jansson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-jansson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.12-13.Final_redhat_2.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.12-13.Final_redhat_2.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-8.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-8.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-10.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-10.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-20.GA.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-20.GA.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-41.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el6","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-73.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-apr-util-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-54.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-brotli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-brotli-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-9.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-jansson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-jansson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-jansson-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-24.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.64.1-21.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.12-13.Final_redhat_2.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.12-13.Final_redhat_2.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-8.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-8.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.46-26.redhat_1.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-10.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-10.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-20.GA.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-20.GA.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-41.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.39.2-10.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1c-4.jbcs.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"curl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"curl-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcurl-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-12.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-59.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-54.el7_7.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"curl-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.20+esm3"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15","7.35.0-1ubuntu2.16","7.35.0-1ubuntu2.17","7.35.0-1ubuntu2.19","7.35.0-1ubuntu2.20","7.35.0-1ubuntu2.20+esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.14"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.8"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.14"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.8"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.20+esm3"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15","7.35.0-1ubuntu2.16","7.35.0-1ubuntu2.17","7.35.0-1ubuntu2.19","7.35.0-1ubuntu2.20","7.35.0-1ubuntu2.20+esm2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-lp151.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"curl-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-lp151.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-lp150.2.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.79.1-1.1"}]}],"bundled":48}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"haxx","product":"curl"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_unified_manager"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snapcenter"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"communications_operations_monitor"},{"vendor":"oracle","product":"communications_session_border_controller"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"hyperion_essbase"},{"vendor":"oracle","product":"mysql_server"},{"vendor":"oracle","product":"oss_support_tools"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2020/dsa-4633","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2020/Feb/36","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-29","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20200416-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20191004-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5482.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5482","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT"},{"url":"https://security.netapp.com/advisory/ntap-20191004-0003"},{"url":"https://security.netapp.com/advisory/ntap-20200416-0003"},{"url":"https://github.com/advisories/GHSA-35cc-32cj-vr6g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-5482","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-5482","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1778223262.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-5482","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0337.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23789","tags":["report"]},{"url":"https://curl.haxx.se/changes.html#7_65_0","tags":["web"]},{"url":"https://curl.haxx.se/changes.html#7_66_0","tags":["web"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5435.html","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5436.html","tags":["advisory","article"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5481.html","tags":["advisory","article"]},{"url":"https://usn.ubuntu.com/3993-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0250","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695036","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBCS-129","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-343","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-632","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-813","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-847","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBCS-856","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0250.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-0220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0220","tags":["advisory"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.4","tags":["article"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5481","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5481","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5482","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1792","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710620","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1792.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5436","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3916","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836773","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3916.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0759","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0759.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0877","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0877.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1027","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1027.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914172-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149496","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5482","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192339-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192373-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149495","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5481","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192381-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-5482","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4129-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4129-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-5481","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NIKS45KSFVOLSIAG25BFXES44NWKE3CF/#NIKS45KSFVOLSIAG25BFXES44NWKE3CF","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2OQDY2WY4IJ7RZNRIYSG6HVK76K77GK2/#2OQDY2WY4IJ7RZNRIYSG6HVK76K77GK2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22947","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T18:06:35Z","modified":"2026-10-14T06:35:46.387Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:20:18.411291Z"}],"euvd":[{"id":"EUVD-2019-15060","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T18:06:35Z","modified":"2026-10-14T06:35:46Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-35cc-32cj-vr6g","title":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2022-05-24T16:56:18Z","modified":"2026-10-14T09:32:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T19:15:10.633Z","modified":"2026-10-14T07:16:55.343Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:05:28.126831Z"}],"osv":[{"id":"ALPINE-CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T19:15:10.633Z","modified":"2026-11-03T06:31:58.412379934Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2019-5482","title":"CVE-2019-5482 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:16.35145Z","modified":"2026-01-26T09:48:07.302427Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T19:15:10.633Z","modified":"2026-10-24T10:30:43.772352939Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-16T19:15:10.633Z","modified":"2026-10-15T07:47:25.851764522Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2020:0250","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP1 Security Update","status":"published","published":"2024-09-13T19:56:17Z","modified":"2026-09-21T10:02:29Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1792","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-16T02:24:54Z","modified":"2026-09-21T10:02:35Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3916","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T14:13:41Z","modified":"2026-08-09T10:02:19Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0759","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T14:13:30Z","modified":"2026-08-09T10:02:31Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0877","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T14:12:15Z","modified":"2026-08-09T10:02:34Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1027","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T14:12:35Z","modified":"2026-08-09T10:02:35Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","status":"published","published":"2019-09-11T00:00:00Z","modified":"2026-04-27T09:10:17.656967Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"CLSA-2026-1778223262","title":"curl: Fix of 3 CVEs","description":"- CVE-2016-8618: fix double-free in curl_maprintf\n- CVE-2016-8619: fix double-free in krb5 code\n- CVE-2019-5482: fix heap buffer overflow in TFTP receive","status":"published","published":"2026-05-08T11:36:58Z","modified":"2026-06-01T00:33:17.189811785Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CURL-CVE-2019-5482","title":"TFTP small blocksize heap buffer overflow","description":"libcurl contains a heap buffer overflow in the function\n(`tftp_receive_packet()`) that receives data from a TFTP server. It can call\n`recvfrom()` with the default size for the buffer rather than with the size\nthat was used to allocate it. Thus, the content that might overwrite the heap\nmemory is controlled by the server.\n\nThis flaw is only triggered if the TFTP server sends an `OACK` without the\n`BLKSIZE` option, when a `BLKSIZE` smaller than 512 bytes was requested by the\nTFTP client.  `OACK` is a TFTP extension and is not used by all TFTP servers.\n\nUsers choosing a smaller block size than default should be rare as the primary\nuse case for changing the size is to make it larger.\n\nIt is rare for users to use TFTP across the Internet. It is most commonly used\nwithin local networks. TFTP as a protocol is always inherently insecure.\n\nThis issue was introduced by the add of the TFTP `BLKSIZE` option handling. It\nwas previously incompletely fixed by an almost identical issue called\nCVE-2019-5436.","status":"published","published":"2019-09-11T08:00:00Z","modified":"2026-10-25T01:05:29.778359483Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"DLA-1917-1","title":"curl - security update","status":"published","published":"2019-09-12T00:00:00Z","modified":"2026-03-09T01:22:27.607045Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4633-1","title":"curl - security update","status":"published","published":"2020-02-24T00:00:00Z","modified":"2026-03-09T02:11:07.847818Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2019-0337","title":"Updated curl packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nAn integer overflow in curl's URL API results in a buffer overflow\nin libcurl 7.62.0 to and including 7.64.1. (CVE-2019-5435)\n\nA heap buffer overflow in the TFTP receiving code allows for DoS or\narbitrary code execution in libcurl versions 7.19.4 through 7.64.1\n(CVE-2019-5436).\n\nDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to\n7.65.3 (CVE-2019-5481).\n\nHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to\n7.65.3 (CVE-2019-5482).\n","status":"published","published":"2019-11-30T13:06:06Z","modified":"2026-04-16T04:43:05.660239405Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2149-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495).\n- CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-09-17T18:18:30Z","modified":"2026-02-04T04:36:00.800624Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2169-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495).\n- CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-09-24T08:18:09Z","modified":"2026-02-04T04:09:33.371255Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10582-1","title":"curl-7.79.1-1.1 on GA media","description":"These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:40:36.472951Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:14172-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5482: Fixed a TFTP small blocksize heap buffer overflow (bsc#1149496).\n","status":"published","published":"2019-09-17T13:42:12Z","modified":"2025-05-02T04:09:20.751Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2339-2","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).\n","status":"published","published":"2019-09-12T12:18:17Z","modified":"2026-02-04T02:22:47.764469Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2373-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495).\n- CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).\n","status":"published","published":"2019-09-12T12:18:57Z","modified":"2026-02-04T03:10:53.960912Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2381-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5481: Fixed a double-free during kerberos FTP data transfer. (bsc#1149495)\n- CVE-2019-5482: Fixed a TFTP small block size heap buffer overflow (bsc#1149496).\n","status":"published","published":"2019-09-16T13:18:33Z","modified":"2026-02-04T04:14:45.720118Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-4129-1","title":"curl vulnerabilities","description":"Thomas Vegas discovered that curl incorrectly handled memory when using\nKerberos over FTP.  A remote attacker could use this issue to crash curl,\nresulting in a denial of service. (CVE-2019-5481)\n\nThomas Vegas discovered that curl incorrectly handled memory during TFTP\ntransfers. A remote attacker could use this issue to crash curl, resulting\nin a denial of service, or possibly execute arbitrary code. (CVE-2019-5482)\n","status":"published","published":"2019-09-11T08:37:44Z","modified":"2026-04-27T09:15:48.228651Z","updated_at":"2026-11-02T16:58:14.019824Z"},{"id":"USN-4129-2","title":"curl vulnerability","description":"USN-4129-1 fixed a vulnerability in curl. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.\n\nOriginal advisory details:\n\n Thomas Vegas discovered that curl incorrectly handled memory during TFTP\n transfers. A remote attacker could use this issue to crash curl, resulting\n in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2019-09-12T20:10:38Z","modified":"2026-04-27T09:15:51.422545Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}