CVE-2020-19909

CVE-2020-19909 is an integer overflow vulnerability in curl 7.65.2, specifically within the tool_operate.c file, triggered by providing a very large value for the retry delay. This vulnerability has a CVSS score of 3.3 (LOW), indicating a local attack vector with low complexity, and a potential for denial of service (availability impact). While it could theoretically cause a denial of service to associated systems by misinterpreting an extremely long retry delay, this scenario is considered highly implausible given the impracticality of the required input. There is no evidence of active exploitation, and no exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Despite its low technical severity, this CVE has garnered significant community attention, with numerous discussions and media articles, primarily criticizing its inclusion and highlighting perceived issues with the CVE system itself.