DEBIAN-CVE-2023-46219

DEBIAN-CVE-2023-46219 PUBLISHED CVSS 5.300000190734863 MEDIUM

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Risk Scores

CVSS v3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:13	curl	0, 0, 0
Debian:14	curl	0, 0, 0
Debian:11	curl	8.20.0~rc3-1, ,
Debian:12	curl	, , 0

Timeline

Dec 12, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-46219 advisory

Open in Interactive Console →