EXPOSURES › CVE-2019-5482
CVE-2019-5482
CRITICAL
DETAIL
SourceNVD · cve
Published2019-09-16
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-5482 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendorOracle · vendordebian · vendorfedoraproject · vendorhaxx · vendoropensuse · vendorHTTP Server · productcloud backup · productcommunications operations monitor · productcommunications session border controller · productcurl · productdebian linux · productenterprise manager ops center · productfedora · producthyperion essbase · productleap · productmysql server · productoncommand insight · productoncommand unified manager · productoncommand workflow automation · productoss support tools · productsnapcenter · productsteelstore cloud integrated storage · product
DESCRIPTION
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
AFFECTED FEDRAMP PRODUCTS · 11
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Cloud Insights NetApp |
In Process |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |