PT-2023-29913 · Curl+6 · Curl+6

Cxshakal · Published 2023-12-06 · Updated 2026-05-18 · CVE-2023-46219

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

ALT-PU-2023-7837

ALT-PU-2023-7977

ALT-PU-2023-8180

ALT-PU-2023-8316

AZL-32120

AZL-32125

AZL-35020

AZL-35781

CLEANSTART-2026-AY18527

CLEANSTART-2026-BW46578

CLEANSTART-2026-DI23929

CLEANSTART-2026-LQ42192

CLEANSTART-2026-OF85770

CVE-2023-46219

DSA-5587-1

MGASA-2023-0345

OESA-2023-1958

OESA-2023-1959

OESA-2023-1960

OESA-2023-1961

OESA-2023-1962

OPENSUSE-SU-2023_4659-1

OPENSUSE-SU-2024:13509-1

RHSA-2024:1316

ROSA-SA-2025-2673

SUSE-SU-2023:4653-1

SUSE-SU-2023:4659-1

USN-6535-1

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Curl

References · 321

• 🔥 https://hackerone.com/reports/2236133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-28321 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-27779 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7264 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0500 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-27781 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-27534 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22924 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:4659-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8169 · Security Note
• https://osv.dev/vulnerability/AZL-32120 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1960 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22925 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000257 · Security Note