High DSA-4386-1 3 CVEs

curl - security update

Published Feb 6, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	curl	7.52.1-5+deb9u9

Vulnerabilities 3

High 7.1

CVE-2019-3822 EPSS 13%

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an…

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Medium 5.4

CVE-2018-16890 Public exploit

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Medium 4.3

CVE-2019-3823

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-…

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019