What is GHSA-2792-x8v5-77wp?

GHSA-2792-x8v5-77wp is a security advisory published by GitHub Security Advisories with Low severity. Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry...

Which CVE IDs does GHSA-2792-x8v5-77wp cover?

GHSA-2792-x8v5-77wp covers the following CVE IDs: CVE-2020-19909. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2792-x8v5-77wp?

GHSA-2792-x8v5-77wp has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-2792-x8v5-77wpLowCVSS 9.8

Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry...

Vendor

GitHub Security Advisories

Published

August 22, 2023

Last Modified

July 24, 2026

🔗 CVE IDs covered (1)

CVE-2020-19909 →

📋 Description

Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via crafted value as the retry delay.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-19909
https://github.com/curl/curl/pull/4166
https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves
http://www.openwall.com/lists/oss-security/2026/07/23/2
https://github.com/advisories/GHSA-2792-x8v5-77wp