Search for vulnerabilities
Vulnerability details: VCID-x591-qs6b-aaar
Vulnerability ID VCID-x591-qs6b-aaar
Aliases CVE-2023-46219
Summary When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-311 Missing Encryption of Sensitive Data
System Score Found at
cvssv3 4.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
epss 0.00052 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00062 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00109 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00129 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00129 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00198 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00198 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00507 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
epss 0.00989 https://api.first.org/data/v1/epss?cve=CVE-2023-46219
cvssv3.1 Low https://curl.se/docs/CVE-2023-46219.html
cvssv3.1 4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-46219
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-46219
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
https://api.first.org/data/v1/epss?cve=CVE-2023-46219
https://curl.se/docs/CVE-2023-46219.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46219
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://hackerone.com/reports/2236133
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
https://security.netapp.com/advisory/ntap-20240119-0007/
https://www.debian.org/security/2023/dsa-5587
1057645 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057645
2252034 https://bugzilla.redhat.com/show_bug.cgi?id=2252034
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
CVE-2023-46219 https://nvd.nist.gov/vuln/detail/CVE-2023-46219
GLSA-202409-20 https://security.gentoo.org/glsa/202409-20
USN-6535-1 https://usn.ubuntu.com/6535-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-46219.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-46219
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-46219
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.21364
EPSS Score 0.00052
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
2024-01-03T17:13:34.633948+00:00 NVD Importer Import https://nvd.nist.gov/vuln/detail/CVE-2023-46219 34.0.0rc1