rhsa-2020:1792 – libcurl and cURL vulnerabilities
The source describes three related vulnerabilities in libcurl and cURL: a heap buffer overflow in TFTP receiving code that may allow denial of service or arbitrary code execution, a double-free in FTP-Kerberos code, and another heap buffer overflow in the TFTP protocol handler.
CERT24