Critical DSA-4633-1 2 CVEs

curl - security update

Published Feb 24, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	curl	7.64.0-4+deb10u1
Debian · 9	curl	7.52.1-5+deb9u10

Vulnerabilities 2

Critical 9.8

CVE-2019-5481

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

curl curl curl gnurl Debian Ubuntu Alpine

Sep 16, 2019
Critical 9.8

CVE-2019-5482 EPSS 18%

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

curl curl curl gnurl Debian Ubuntu Alpine

Sep 16, 2019