UpHeron
All vulnerabilities

Servers and applications

CVE-2019-3822

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received data. The check that exists to prevent the local buffer from getting overflowed is implemented wrongly (using unsigned…

Severity
Critical 9.8
Published
6 Feb 2019
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.64.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:libcurl
  • From 7.36.0 before 7.64.0
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version up to 5.7.26
  • From 5.7.27 up to 8.0.15

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-3822
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-3822