Search for vulnerabilities
Vulnerability details: VCID-ntbe-4v75-c3c1
Vulnerability ID VCID-ntbe-4v75-c3c1
Aliases CVE-2023-46219
Summary When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-311 Missing Encryption of Sensitive Data
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
cvssv3.1 Low https://curl.se/docs/CVE-2023-46219.html
cvssv3.1 4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-46219
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
https://api.first.org/data/v1/epss?cve=CVE-2023-46219
https://curl.se/docs/CVE-2023-46219.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://hackerone.com/reports/2236133
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
https://security.netapp.com/advisory/ntap-20240119-0007/
https://www.debian.org/security/2023/dsa-5587
1057645 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057645
2252034 https://bugzilla.redhat.com/show_bug.cgi?id=2252034
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
CVE-2023-46219 https://nvd.nist.gov/vuln/detail/CVE-2023-46219
USN-6535-1 https://usn.ubuntu.com/6535-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-46219
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.19553
EPSS Score 0.00062
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:38:33.531945+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/6535-1/ 37.0.0