Lucene search
Redhat.comRH:CVE-2019-5443HistoryNov 13, 2019 - 4:37 p.m.
CVE-2019-5443
2019-11-1316:37:26
redhat.com
access.redhat.com
20
0.002 Low
EPSS
Percentile
54.7%
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl “engine”) on invocation. If that curl is invoked by a privileged user it can do anything it wants.
Related
cve
cve
CVE-2019-5443
2019-07-02 19:15:10
hackerone
hackerone
curl: Windows Privilege Escalation: Malicious OpenSSL Engine
2019-06-12 02:21:14
symantec
symantec
curl CVE-2019-5443 Local Code Injection Vulnerability
2019-06-24 00:00:00
osv
osv
CVE-2019-5443
2019-07-02 19:15:10
prion
prion
Code injection
2019-07-02 19:15:00
nvd
nvd
CVE-2019-5443
2019-07-02 19:15:10
ubuntucve
ubuntucve
CVE-2019-5443
2019-07-02 00:00:00
debiancve
debiancve
CVE-2019-5443
2019-07-02 19:15:10
cvelist
cvelist
CVE-2019-5443
2019-07-02 18:31:23
nessus
nessus
Oracle Enterprise Manager Ops Center (Oct 2019 CPU)
2020-01-17 00:00:00
MySQL 5.7.x < 5.7.28 Multiple Vulnerabilities (Oct 2019 CPU)
2019-10-18 00:00:00
MySQL 8.0.x < 8.0.18 Multiple Vulnerabilities (Oct 2019 CPU)
2019-10-18 00:00:00
openvas
openvas
cloudfoundry
cloudfoundry
MySQL Security Updates - Oct 2019 | Cloud Foundry
2020-01-27 00:00:00
freebsd
freebsd
MySQL -- Multiple vulerabilities
2019-10-15 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0420
2023-07-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00