{
  "schema_version": "1.5.0",
  "id": "CURL-CVE-2006-1061",
  "aliases": [
    "CVE-2006-1061"
  ],
  "summary": "TFTP Packet Buffer Overflow",
  "modified": "2026-05-19T11:21:50.00Z",
  "database_specific": {
    "package": "curl",
    "affects": "both",
    "URL": "https://curl.se/docs/CVE-2006-1061.json",
    "www": "https://curl.se/docs/CVE-2006-1061.html",
    "CWE": {
      "id": "CWE-122",
      "desc": "Heap-based Buffer Overflow"
    },
    "last_affected": "7.15.2",
    "severity": "High"
  },
  "published": "2006-03-20T08:00:00.00Z",
  "affected": [
    {
      "ranges": [
        {
           "type": "SEMVER",
           "events": [
             {"introduced": "7.15.0"},
             {"fixed": "7.15.3"}
           ]
        }      ],
      "versions": [
        "7.15.2", "7.15.1", "7.15.0"
      ]
    }
  ],
  "credits": [
    {
      "name": "Ulf Harnhammar",
      "type": "FINDER"
    },
    {
      "name": "Daniel Stenberg",
      "type": "REMEDIATION_DEVELOPER"
    }
  ],
  "details": "libcurl uses the given file part of a TFTP URL in a manner that allows a\nmalicious user to overflow a heap-based memory buffer due to the lack of\nboundary check.\n\nThis overflow happens if you pass in a URL with a TFTP protocol prefix\n(\"tftp://\"), using a valid host and a path part that is longer than 512 bytes.\n\nThe affected flaw can be triggered by a redirect, if curl/libcurl is told to\nfollow redirects and an HTTP server points the client to a tftp URL with the\ncharacteristics described above."
}