Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-46219

Good to know:

icon

Date: December 11, 2023

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Language: C

Severity Score

Related Resources (9)

https://hackerone.com/reports/2236133
https://nvd.nist.gov/vuln/detail/CVE-2023-46219
https://curl.se/docs/CVE-2023-46219.html
https://security-tracker.debian.org/tracker/CVE-2023-46219
https://github.com/curl/curl/commit/20f9dd6bae50b722
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
https://www.debian.org/security/2023/dsa-5587
https://security.netapp.com/advisory/ntap-20240119-0007/
https://www.mend.io/vulnerability-database/CVE-2023-46219

Severity Score

Weakness Type (CWE)

Missing Encryption of Sensitive Data

CWE-311

Top Fix

icon

Upgrade Version

Upgrade to version curl-8_5_0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us