CVE-2023-46218
First published: Wed Nov 29 2023(Updated: )
cURL libcurl could allow a remote attacker to bypass security restrictions, caused by a mixed case flaw when curl is built without PSL support. By sending a specially crafted request, an attacker could exploit this vulnerability to allow a HTTP server to set "super cookies" in curl.
Credit: support@hackerone.com support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Haxx Curl | >=7.46.0<=8.4.0 | |
| Fedoraproject Fedora | =39 | |
| redhat/curl | <8.5.0 | 8.5.0 |
| ubuntu/curl | <7.58.0-2ubuntu3.24+ | 7.58.0-2ubuntu3.24+ |
| ubuntu/curl | <7.68.0-1ubuntu2.21 | 7.68.0-1ubuntu2.21 |
| ubuntu/curl | <7.81.0-1ubuntu1.15 | 7.81.0-1ubuntu1.15 |
| ubuntu/curl | <7.88.1-8ubuntu2.4 | 7.88.1-8ubuntu2.4 |
| ubuntu/curl | <8.2.1-1ubuntu3.2 | 8.2.1-1ubuntu3.2 |
| ubuntu/curl | <8.5.0 | 8.5.0 |
| ubuntu/curl | <7.47.0-1ubuntu2.19+ | 7.47.0-1ubuntu2.19+ |
| debian/curl | <=7.64.0-4+deb10u2 | 7.64.0-4+deb10u9 7.74.0-1.3+deb11u11 7.88.1-10+deb12u5 8.7.1-5 |
| F5 BIG-IP Next | >=20.0.1<=20.0.2 | 20.1.0 |
| F5 BIG-IP Next Central Manager | >=20.0.1<=20.0.2 | 20.1.0 |
| F5 BIG-IP Next SPK | >=1.7.0<=1.9.1 | |
| F5 BIG-IP Next CNF | >=1.1.0<=1.2.1 | |
| F5 BIG-IP | >=17.1.0<=17.1.1 | |
| F5 BIG-IP | >=16.1.0<=16.1.4 | |
| F5 BIG-IP | >=15.1.0<=15.1.10 | |
| F5 BIG-IQ Centralized Management | >=8.0.0<=8.3.0 | |
| IBM QRadar SIEM | <=7.5 - 7.5.0 UP8 IF01 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://hackerone.com/reports/2212193
- https://curl.se/docs/CVE-2023-46218.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
- https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
- https://www.debian.org/security/2023/dsa-5587
- https://security.netapp.com/advisory/ntap-20240125-0007/
- https://launchpad.net/bugs/cve/CVE-2023-46218
- https://daniel.haxx.se/blog/2023/12/06/curl-8-5-0/
- https://seclists.org/oss-sec/2023/q4/261
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2253142
- https://access.redhat.com/errata/RHSA-2024:0434
- https://access.redhat.com/errata/RHSA-2024:0452
- https://access.redhat.com/errata/RHSA-2024:0428
- https://access.redhat.com/errata/RHSA-2024:0585
- https://access.redhat.com/errata/RHSA-2024:1129
- https://access.redhat.com/errata/RHSA-2024:1317
- https://access.redhat.com/errata/RHSA-2024:1316
- https://access.redhat.com/errata/RHSA-2024:1601
- https://bugzilla.redhat.com/show_bug.cgi?id=2252030
- https://ubuntu.com/security/notices/USN-6535-1
- https://ubuntu.com/security/notices/USN-6641-1
- https://www.cve.org/CVERecord?id=CVE-2023-46218
- https://nvd.nist.gov/vuln/detail/CVE-2023-46218
- https://security-tracker.debian.org/tracker/CVE-2023-46218
- https://github.com/curl/curl/commit/2b0994c29a721c91c57
- https://ubuntu.com/security/CVE-2023-46218
- https://github.com/curl/curl/commit/e77b5b7453c1e8ccd7ec0816890d98e2f392e465
- https://github.com/curl/curl/commit/2b0994c29a721c91c572cff7808c572a24d251eb
- https://my.f5.com/manage/s/article/K000138650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/273320
- https://www.ibm.com/support/pages/node/7150684 (Advisory)
Frequently Asked Questions
What is CVE-2023-46218?
CVE-2023-46218 is a vulnerability related to cookie handling in the curl library, which allows for a mixed case Public Suffix List (PSL) bypass.
What is the severity of CVE-2023-46218?
The severity of CVE-2023-46218 is not specified in the provided information.
Which software is affected by CVE-2023-46218?
The affected software is 'curl' with versions up to exclusive 8.5.0 on Ubuntu, and versions up to inclusive 7.64.0-4+deb10u2, 7.64.0-4+deb10u7, 7.74.0-1.3+deb11u9, 7.74.0-1.3+deb11u10, 7.88.1-10+deb12u3, 7.88.1-10+deb12u4, and 8.4.0-2 on Debian.
How do I fix the CVE-2023-46218 vulnerability on Ubuntu?
To fix the CVE-2023-46218 vulnerability on Ubuntu, update the 'curl' package to version 8.5.0 or later.
How do I fix the CVE-2023-46218 vulnerability on Debian?
There is no specific remedy mentioned for the CVE-2023-46218 vulnerability on Debian. Consider monitoring the official Debian security advisories for updates or contact the package maintainers for more information.
- agent/type
- agent/author
- agent/remedy
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-cve
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-46218
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- collector/f5-advisory
- source/F5
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- vendor/haxx
- canonical/haxx curl
- version/haxx curl/7.46.0
- version/haxx curl/8.4.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/39
- package-manager/redhat
- package-manager/ubuntu
- package-manager/debian
- vendor/f5
- canonical/f5 big-ip next
- version/f5 big-ip next/20.0.1
- version/f5 big-ip next/20.0.2
- canonical/f5 big-ip next central manager
- version/f5 big-ip next central manager/20.0.1
- version/f5 big-ip next central manager/20.0.2
- canonical/f5 big-ip next spk
- version/f5 big-ip next spk/1.7.0
- version/f5 big-ip next spk/1.9.1
- canonical/f5 big-ip next cnf
- version/f5 big-ip next cnf/1.1.0
- version/f5 big-ip next cnf/1.2.1
- canonical/f5 big-ip
- version/f5 big-ip/17.1.0
- version/f5 big-ip/17.1.1
- version/f5 big-ip/16.1.0
- version/f5 big-ip/16.1.4
- version/f5 big-ip/15.1.0
- version/f5 big-ip/15.1.10
- canonical/f5 big-iq centralized management
- version/f5 big-iq centralized management/8.0.0
- version/f5 big-iq centralized management/8.3.0
- vendor/ibm
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5 - 7.5.0 up8 if01