Lucene search
Cloud FoundryCFOUNDRY:9D37488D2813F55B6D442F6865B71793HistoryAug 10, 2020 - 12:00 a.m.
PXC Release update for April 2020 MySQL security patches | Cloud Foundry
2020-08-1000:00:00
Cloud Foundry
www.cloudfoundry.org
36
0.098 Low
EPSS
Percentile
94.8%
Severity
Critical
Vendor
Cloud Foundry Foundation
Description
Cloud Foundry Deployment, through its consumption of Percona XtraDB Cluster Release, is vulnerable to various MySQL vulnerabilities patched in the April 2020 Critical Patch Update, including the following high and critical issues:
- CVE-2019-5482
- CVE-2019-15601
Affected Cloud Foundry Products and Versions
Severity is critical unless otherwise noted.
- PXC
- All versions prior to v0.28.0
- CF Deployment
- All versions prior to v13.9.0
Mitigation
Users of affected products are strongly encouraged to follow the mitigations below. The Cloud Foundry project recommends upgrading the following releases:
- PXC
- Upgrade all versions to v0.28.0 or greater
- CF Deployment
- Upgrade all versions to v13.9.0 or greater
References
History
2020-08-11: Initial vulnerability report published.
Related
cvelist
cvelist
CVE-2019-15601
2020-01-06 16:32:53
CVE-2019-5482
2019-09-16 18:06:35
ibm
ibm
nvd
nvd
CVE-2019-15601
2020-01-06 17:15:12
CVE-2019-5482
2019-09-16 19:15:10
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1345)
2020-04-01 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1144)
2020-02-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2339-2)
2021-04-19 00:00:00
hackerone
hackerone
curl: curl still vulnerable to SMB access smuggling via FILE URL on Windows
2020-03-08 01:06:41
curl: Heap buffer overflow in TFTP when using small blksize
2019-08-29 15:52:19
veracode
veracode
Unauthorized Remote File Access
2020-01-08 04:47:16
Arbitrary Code Execution
2019-09-12 07:10:22
cve
cve
CVE-2019-15601
2020-01-06 17:15:12
CVE-2019-5482
2019-09-16 19:15:10
symantec
symantec
cURL CVE-2019-15601 Remote Security Bypass Vulnerability
2020-01-08 00:00:00
curl/libcURL CVE-2019-5482 Heap Buffer Overflow Vulnerability
2019-08-31 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2020-1345)
2020-04-02 00:00:00
EulerOS 2.0 SP8 : curl (EulerOS-SA-2020-1144)
2020-02-25 00:00:00
RHEL 7 : curl (RHSA-2020:3916)
2020-09-30 00:00:00
redhatcve
redhatcve
CVE-2019-15601
2020-04-14 19:26:09
CVE-2019-5482
2019-09-13 06:51:53
osv
osv
curl - security update
2019-09-12 00:00:00
CVE-2019-5482
2019-09-16 19:15:10
curl - security update
2020-02-24 00:00:00
ubuntu
ubuntu
curl vulnerability
2019-09-12 00:00:00
curl vulnerabilities
2019-09-11 00:00:00
debian
debian
[SECURITY] [DLA 1917-1] curl security update
2019-09-13 08:18:00
[SECURITY] [DSA 4633-1] curl security update
2020-02-24 19:45:52
oraclelinux
oraclelinux
curl security update
2020-03-08 00:00:00
curl security update
2020-03-09 00:00:00
curl security update
2020-05-05 00:00:00
centos
centos
curl, libcurl security update
2020-10-20 17:52:24
checkpoint_advisories
checkpoint_advisories
Haxx Curl Buffer Overflow (CVE-2019-5482)
2020-02-25 00:00:00
alpinelinux
alpinelinux
CVE-2019-5482
2019-09-16 19:15:10
redhat
redhat
(RHSA-2021:0759) Moderate: curl security update
2021-03-09 08:47:34
(RHSA-2021:0877) Moderate: curl security update
2021-03-16 13:07:11
(RHSA-2021:1027) Moderate: curl security update
2021-03-30 07:24:22
prion
prion
Heap overflow
2019-09-16 19:15:00
ubuntucve
ubuntucve
CVE-2019-5482
2019-09-11 00:00:00
debiancve
debiancve
CVE-2019-5482
2019-09-16 19:15:10
f5
f5
K41523201 : cURL vulnerability CVE-2019-5482
2020-12-23 00:00:00
suse
suse
Security update for curl (important)
2019-09-24 00:00:00
Security update for curl (important)
2019-09-18 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: curl-7.66.0-1.fc31
2019-09-21 00:04:17
[SECURITY] Fedora 30 Update: curl-7.65.3-4.fc30
2019-09-18 00:56:35
[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29
2019-09-29 02:22:57
cloudfoundry
cloudfoundry
USN-4129-1: curl vulnerabilities | Cloud Foundry
2019-09-30 00:00:00
slackware
slackware
[slackware-security] curl
2019-09-12 05:20:08
amazon
amazon
Medium: curl
2019-10-21 18:01:00
Medium: curl
2019-09-30 20:56:00
freebsd
freebsd
curl -- multiple vulnerabilities
2019-09-11 00:00:00
MySQL Server -- Multiple vulerabilities
2020-04-14 00:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-03-15 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2019-11-30 16:06:06
photon
photon
Critical Photon OS Security Update - PHSA-2019-0032
2019-10-04 00:00:00
Critical Photon OS Security Update - PHSA-2019-3.0-0032
2019-10-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00