Lucene search
HistoryDec 12, 2023 - 2:15 a.m.
CVE-2023-46219
cve-2023-46219
hsts
file name
curl
removal
contents
requests
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
20.5%
When saving HSTS data to an excessively long file name, curl could end up
removing all contents, making subsequent requests using that file unaware of
the HSTS status they should otherwise use.
Affected configurations
Node
haxxcurlRange7.84.0–8.5.0
Node
fedoraprojectfedoraMatch38
Related
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1625)
2024-05-15 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1760)
2024-05-30 00:00:00
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1737)
2024-05-30 00:00:00
cve
cve
CVE-2023-46219
2023-12-12 02:15:06
debiancve
debiancve
CVE-2023-46219
2023-12-12 02:15:06
osv
osv
HSTS long filename clears contents
2023-12-06 08:00:00
CVE-2023-46219
2023-12-12 02:15:06
curl vulnerabilities
2023-12-06 12:11:58
nessus
nessus
EulerOS 2.0 SP11 : curl (EulerOS-SA-2024-1233)
2024-03-12 00:00:00
Curl 7.84.0 <= 8.4.0 Information Disclosure (CVE-2023-46219)
2024-01-09 00:00:00
EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2024-1625)
2024-05-15 00:00:00
f5
f5
K000138641 : cURL vulnerability CVE-2023-46219
2024-02-17 00:00:00
cvelist
cvelist
CVE-2023-46219
2023-12-12 01:38:41
ubuntucve
ubuntucve
CVE-2023-46219
2023-12-06 00:00:00
cgr
cgr
CVE-2023-46219 vulnerabilities
2024-05-19 03:07:16
prion
prion
Code injection
2023-12-12 02:15:00
veracode
veracode
Missing Encryption Of Sensitive Data
2023-12-08 01:03:15
redhatcve
redhatcve
CVE-2023-46219
2023-12-06 09:47:45
alpinelinux
alpinelinux
CVE-2023-46219
2023-12-12 02:15:06
cbl_mariner
cbl_mariner
CVE-2023-46219 affecting package curl for versions less than 8.5.0-1
2024-01-14 22:46:30
hackerone
hackerone
curl: CVE-2023-46219: HSTS long file name clears contents
2023-11-02 00:51:08
wolfi
wolfi
CVE-2023-46219 vulnerabilities
2024-06-24 09:08:26
fedora
fedora
[SECURITY] Fedora 39 Update: curl-8.2.1-4.fc39
2023-12-10 01:37:35
[SECURITY] Fedora 38 Update: curl-8.0.1-6.fc38
2023-12-15 02:19:17
amazon
amazon
Low: curl
2024-01-03 21:04:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2023-12-13 21:32:37
cloudfoundry
cloudfoundry
USN-6535-1: curl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
debian
debian
[SECURITY] [DSA 5587-1] curl security update
2023-12-23 19:13:59
ubuntu
ubuntu
curl vulnerabilities
2023-12-06 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2024-4.0-0623
2024-06-04 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0280
2024-05-28 00:00:00
ibm
ibm
redhat
redhat
ics
ics
Siemens SIMATIC RTLS Locating Manager
2024-05-16 12:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
20.5%
Related for NVD:CVE-2023-46219