Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-46219

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Published

2023-12-12T02:15:06.990

Last Modified

2025-02-13T18:15:34.003

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-311

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	haxx	curl	< 8.5.0	Yes
Operating System	fedoraproject	fedora	38	Yes

References

https://curl.se/docs/CVE-2023-46219.html Vendor Advisory ([email protected])
https://hackerone.com/reports/2236133 Exploit, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20240119-0007/ ([email protected])
https://www.debian.org/security/2023/dsa-5587 ([email protected])
https://curl.se/docs/CVE-2023-46219.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://hackerone.com/reports/2236133 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240119-0007/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5587 (af854a3a-2127-422b-91ae-364da2661108)