CVE-2023-28319

Summary

CVE	CVE-2023-28319
State	PUBLISHED
Assigner	hackerone
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-05-26 21:15:10 UTC
Updated	2026-10-23 23:10:00 UTC
Description	A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.

Primary CVSS: v3.1 7.5 HIGH from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem Types: CWE-416 | CWE-416 Use After Free (CWE-416)

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
3.1	ADP	DECLARED	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Apple	Macos	All	All	All	All
Application	Haxx	Curl	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	Https//github.com/curl/curl	affected Fixed in 8.1.0	Not specified

Reference	Source	Link	Tags
May 2023 cURL/libcURL Vulnerabilities in NetApp Products \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com	Third Party Advisory
Full Disclosure: APPLE-SA-2023-07-24-6 macOS Big Sur 11.7.9	af854a3a-2127-422b-91ae-364da2661108	seclists.org	Mailing List, Third Party Advisory
Full Disclosure: APPLE-SA-2023-07-24-5 macOS Monterey 12.6.8	af854a3a-2127-422b-91ae-364da2661108	seclists.org	Mailing List, Third Party Advisory
About the security content of macOS Monterey 12.6.8 - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com	Third Party Advisory
About the security content of macOS Big Sur 11.7.9 - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com	Third Party Advisory
HackerOne	af854a3a-2127-422b-91ae-364da2661108	hackerone.com	Exploit, Patch, Third Party Advisory
Full Disclosure: APPLE-SA-2023-07-24-4 macOS Ventura 13.5	af854a3a-2127-422b-91ae-364da2661108	seclists.org	Mailing List, Third Party Advisory
About the security content of macOS Ventura 13.5 - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com	Third Party Advisory
curl: Multiple Vulnerabilities (GLSA 202310-12) — Gentoo security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

183843 Debian Security Update for curl (CVE-2023-28319)
241954 Red Hat Update for JBoss Core Services (RHSA-2023:4629)
355747 Amazon Linux Security Advisory for curl : ALAS2023-2023-270
378687 Apple macOS Ventura 13.5 Not Installed (HT213843)
378688 Apple macOS Monterey 12.6.8 Not Installed (HT213844)
378689 Apple macOS Big Sur 11.7.9 Not Installed (HT213845)
503014 Alpine Linux Security Update for curl
691172 Free Berkeley Software Distribution (FreeBSD) Security Update for curl (a4f8bb03-f52f-11ed-9859-080027083a05)
710772 Gentoo Linux curl Multiple Vulnerabilities (GLSA 202310-12)
754069 SUSE Enterprise Linux Security Update for curl (SUSE-SU-2023:2225-1)
907198 Common Base Linux Mariner (CBL-Mariner) Security Update for curl (26795-1)
907375 Common Base Linux Mariner (CBL-Mariner) Security Update for rust (26810-1)
907644 Common Base Linux Mariner (CBL-Mariner) Security Update for mysql (26807-1)