Intrusion PreventioncURL.and.libcurl.TFTP.blksize.Heap.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in cURL Project libcURL.
A remote attacker can exploit this vulnerability by enticing a user to connect to a TFTP server with a crafted blksize value. Successful exploitation can lead to the attacker being able to execute arbitrary code with the privileges of the application.
Affected Products
cURL Project cURL 7.19.4 through 7.65.3
cURL Project libcURL 7.19.4 through 7.65.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://curl.haxx.se/docs/CVE-2019-5436.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48461 |
| Created | Oct 29, 2019 |
| Updated | Sep 25, 2020 |
| Risk |
|
| CVE ID | CVE-2019-5482 CVE-2019-5436 |
| Exploit Prediction Score | 9.76% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |