CVE-2020-19909 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-19909 Interim 1 9 2026-03-05T05:45:19Z current 2023-08-23T23:50:59Z 2026-03-05T05:45:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-19909 Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 curl curl-7.37.0-37.101.1 libcurl-devel libcurl4 libcurl4-32bit libcurl4-32bit-7.37.0-37.101.1 libcurl4-7.37.0-37.101.1 curl-7.37.0-37.101.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libcurl4-7.37.0-37.101.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libcurl4-32bit-7.37.0-37.101.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA curl as a component of SUSE CaaS Platform 4.0 libcurl-devel as a component of SUSE CaaS Platform 4.0 libcurl4 as a component of SUSE CaaS Platform 4.0 libcurl4-32bit as a component of SUSE CaaS Platform 4.0 curl as a component of SUSE Enterprise Storage 7 curl as a component of SUSE Enterprise Storage 7.1 libcurl-devel as a component of SUSE Enterprise Storage 7.1 libcurl4 as a component of SUSE Enterprise Storage 7.1 libcurl4-32bit as a component of SUSE Enterprise Storage 7.1 curl as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS curl as a component of SUSE Linux Enterprise Micro 5.1 libcurl4 as a component of SUSE Linux Enterprise Micro 5.1 curl as a component of SUSE Linux Enterprise Micro 5.2 libcurl4 as a component of SUSE Linux Enterprise Micro 5.2 curl as a component of SUSE Linux Enterprise Micro 5.3 libcurl4 as a component of SUSE Linux Enterprise Micro 5.3 curl as a component of SUSE Linux Enterprise Micro 5.4 libcurl4 as a component of SUSE Linux Enterprise Micro 5.4 curl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcurl4-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 curl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libcurl4-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 curl as a component of SUSE Linux Enterprise Real Time 15 SP3 libcurl-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 libcurl4 as a component of SUSE Linux Enterprise Real Time 15 SP3 libcurl4-32bit as a component of SUSE Linux Enterprise Real Time 15 SP3 curl as a component of SUSE Linux Enterprise Server 11 SP4 LTSS curl as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcurl4 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL curl as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS curl as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4 as a component of SUSE Linux Enterprise Server 12 SP5 libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP5 curl as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS curl as a component of SUSE Linux Enterprise Server 15-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15-LTSS curl as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 curl as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 curl as a component of SUSE Manager Proxy 4.2 libcurl-devel as a component of SUSE Manager Proxy 4.2 libcurl4 as a component of SUSE Manager Proxy 4.2 libcurl4-32bit as a component of SUSE Manager Proxy 4.2 curl as a component of SUSE Manager Retail Branch Server 4.2 libcurl-devel as a component of SUSE Manager Retail Branch Server 4.2 libcurl4 as a component of SUSE Manager Retail Branch Server 4.2 libcurl4-32bit as a component of SUSE Manager Retail Branch Server 4.2 curl as a component of SUSE Manager Server 4.2 libcurl-devel as a component of SUSE Manager Server 4.2 libcurl4 as a component of SUSE Manager Server 4.2 libcurl4-32bit as a component of SUSE Manager Server 4.2 curl as a component of SUSE OpenStack Cloud 9 libcurl4 as a component of SUSE OpenStack Cloud 9 libcurl4-32bit as a component of SUSE OpenStack Cloud 9 curl as a component of SUSE OpenStack Cloud Crowbar 9 libcurl4 as a component of SUSE OpenStack Cloud Crowbar 9 libcurl4-32bit as a component of SUSE OpenStack Cloud Crowbar 9 Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error. CVE-2020-19909 SUSE Linux Enterprise Server 12 SP3-TERADATA:curl-7.37.0-37.101.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libcurl4-7.37.0-37.101.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libcurl4-32bit-7.37.0-37.101.1 SUSE CaaS Platform 4.0:curl SUSE CaaS Platform 4.0:libcurl-devel SUSE CaaS Platform 4.0:libcurl4 SUSE CaaS Platform 4.0:libcurl4-32bit SUSE Enterprise Storage 7.1:curl SUSE Enterprise Storage 7.1:libcurl-devel SUSE Enterprise Storage 7.1:libcurl4 SUSE Enterprise Storage 7.1:libcurl4-32bit SUSE Enterprise Storage 7:curl SUSE Linux Enterprise High Performance Computing 12 SP5:curl SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:curl SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl4-32bit SUSE Linux Enterprise Micro 5.1:curl SUSE Linux Enterprise Micro 5.1:libcurl4 SUSE Linux Enterprise Micro 5.2:curl SUSE Linux Enterprise Micro 5.2:libcurl4 SUSE Linux Enterprise Micro 5.3:curl SUSE Linux Enterprise Micro 5.3:libcurl4 SUSE Linux Enterprise Micro 5.4:curl SUSE Linux Enterprise Micro 5.4:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP4:curl SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcurl4-32bit SUSE Linux Enterprise Module for Basesystem 15 SP5:curl SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP5:libcurl4-32bit SUSE Linux Enterprise Real Time 15 SP3:curl SUSE Linux Enterprise Real Time 15 SP3:libcurl-devel SUSE Linux Enterprise Real Time 15 SP3:libcurl4 SUSE Linux Enterprise Real Time 15 SP3:libcurl4-32bit SUSE Linux Enterprise Server 11 SP4 LTSS:curl SUSE Linux Enterprise Server 12 SP2-BCL:curl SUSE Linux Enterprise Server 12 SP2-BCL:libcurl4 SUSE Linux Enterprise Server 12 SP2-BCL:libcurl4-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:curl SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:curl SUSE Linux Enterprise Server 12 SP4-ESPOS:libcurl4 SUSE Linux Enterprise Server 12 SP4-ESPOS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:curl SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP5:curl SUSE Linux Enterprise Server 12 SP5:libcurl4 SUSE Linux Enterprise Server 12 SP5:libcurl4-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:curl SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:curl SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP3-LTSS:curl SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15-LTSS:curl SUSE Linux Enterprise Server 15-LTSS:libcurl-devel SUSE Linux Enterprise Server 15-LTSS:libcurl4 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:curl SUSE Linux Enterprise Server for SAP Applications 12 SP2:curl SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:curl SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcurl4 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP5:curl SUSE Linux Enterprise Server for SAP Applications 15 SP1:curl SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP2:curl SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP3:curl SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl4-32bit SUSE Linux Enterprise Software Development Kit 12 SP5:curl SUSE Linux Enterprise Software Development Kit 12 SP5:libcurl-devel SUSE Manager Proxy 4.2:curl SUSE Manager Proxy 4.2:libcurl-devel SUSE Manager Proxy 4.2:libcurl4 SUSE Manager Proxy 4.2:libcurl4-32bit SUSE Manager Retail Branch Server 4.2:curl SUSE Manager Retail Branch Server 4.2:libcurl-devel SUSE Manager Retail Branch Server 4.2:libcurl4 SUSE Manager Retail Branch Server 4.2:libcurl4-32bit SUSE Manager Server 4.2:curl SUSE Manager Server 4.2:libcurl-devel SUSE Manager Server 4.2:libcurl4 SUSE Manager Server 4.2:libcurl4-32bit SUSE OpenStack Cloud 9:curl SUSE OpenStack Cloud 9:libcurl4 SUSE OpenStack Cloud 9:libcurl4-32bit SUSE OpenStack Cloud Crowbar 9:curl SUSE OpenStack Cloud Crowbar 9:libcurl4 SUSE OpenStack Cloud Crowbar 9:libcurl4-32bit moderate 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L