5.3
Moyenne
CVE-2023-46219 When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent…
Description
When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| curl | 8.4.0 | Pas de correctif indiqué |
| curl 7.84 | premières → < 7.84.0 | 7.84.0 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SINEC NMS | Versions non publiées |
Références
- hackerone.com hackerone.com
- curl.se curl.se
- lists.fedoraproject.org lists.fedoraproject.org
- www.debian.org www.debian.org
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de curl
Les 98 CVE de curl →
CVE-2026-107929
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…
8.1
Élevée
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer
8.1
Élevée
CVE-2026-94266
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing…
7.5
Élevée
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might…
9.1
Critique