CVE-2023-46219
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 1.1%
exploitation probability
1.1%top 35% of all CVEs
observed exploitation
nono source reports it
When saving HSTS data to an excessively long file name, curl could end up
removing all contents, making subsequent requests using that file unaware of
the HSTS status they should otherwise use.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
curl · curlReferences
https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-093430.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-331112.htmlhttps://curl.se/docs/CVE-2023-46219.htmlhttps://hackerone.com/reports/2236133https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/https://security.netapp.com/advisory/ntap-20240119-0007/https://www.debian.org/security/2023/dsa-5587