[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbEJCtXCbPsPK7xCRqae5-Y516H-m4N9rZXBJ-nvowEQ":3,"g5a-risk:CVE-2023-28319":251},{"success":4,"data":5,"meta":248},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":78,"references":79,"referencesCount":134,"weaknesses":135,"weaknessesCount":144,"isActivelyExploited":145,"cisaInfo":26,"otxData":26,"relatedBlogPosts":146,"seoMetadata":147,"configurations":172,"relatedVendorCves":246,"notableEvents":247},"CVE-2023-28319","What is CVE-2023-28319?","A use after free vulnerability exists in curl \u003Cv8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.","A use after free vulnerability exists in curl \u003Cv8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When thi...","2023-05-26T21:15:10.02","2025-01-15T16:15:25.69",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.02489,[33,33,33,33,33,33,33],"High",[37,42,46,51,54,57,60,63,66,69,72,75],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"haxx","curl","*","cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":40,"criteria":45,"vulnerable":4},"apple","macos","cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"netapp","clustered_data_ontap","-","cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",{"vendor":47,"product":52,"version":49,"criteria":53,"vulnerable":4},"ontap_antivirus_connector","cpe:2.3:a:netapp:ontap_antivirus_connector:-:*:*:*:*:*:*:*",{"vendor":47,"product":55,"version":49,"criteria":56,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":49,"criteria":59,"vulnerable":4},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",{"vendor":47,"product":61,"version":49,"criteria":62,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":64,"version":49,"criteria":65,"vulnerable":4},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":47,"product":67,"version":49,"criteria":68,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":70,"version":49,"criteria":71,"vulnerable":4},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":47,"product":73,"version":49,"criteria":74,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":76,"version":49,"criteria":77,"vulnerable":4},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",12,[80,86,89,92,98,102,106,110,113,116,118,120,122,124,126,128,130,132],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2023\u002FJul\u002F47","Seclists",[84,85],"Mailing List","Third Party Advisory",{"url":87,"source":82,"tags":88},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2023\u002FJul\u002F48",[84,85],{"url":90,"source":82,"tags":91},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2023\u002FJul\u002F52",[84,85],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fhackerone.com\u002Freports\u002F1913733","Hackerone",[96,97,85],"Exploit","Patch",{"url":99,"source":100,"tags":101},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202310-12","Gentoo",[85],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230609-0009\u002F","Netapp",[85],{"url":107,"source":108,"tags":109},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT213843","Apple",[85],{"url":111,"source":108,"tags":112},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT213844",[85],{"url":114,"source":108,"tags":115},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT213845",[85],{"url":81,"source":82,"tags":117},[84,85],{"url":87,"source":82,"tags":119},[84,85],{"url":90,"source":82,"tags":121},[84,85],{"url":93,"source":94,"tags":123},[96,97,85],{"url":99,"source":100,"tags":125},[85],{"url":103,"source":104,"tags":127},[85],{"url":107,"source":108,"tags":129},[85],{"url":111,"source":108,"tags":131},[85],{"url":114,"source":108,"tags":133},[85],18,[136],{"id":137,"name":138,"description":139,"extendedDescription":140,"status":141,"abstraction":142,"structure":143},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","","Stable","Variant","Simple",1,false,[],{"title":148,"metaDescription":149,"keywords":150,"canonicalUrl":151,"structuredData":152},"What is CVE-2023-28319? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28319, a high severity cyber security vulnerability from 2023. A use after free vulnerability exists in curl \u003Cv8.1.0 in th...","CVE-2023-28319, CVE-2023-28319 vulnerability, CVE-2023-28319 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, haxx security, apple security, netapp security, curl vulnerability, macos vulnerability, clustered_data_ontap vulnerability, ontap_antivirus_connector vulnerability, h300s_firmware vulnerability","\u002Fwhat-is\u002Fcve-2023-28319",{"@context":153,"@type":154,"headline":148,"description":149,"datePublished":10,"dateModified":11,"author":155,"publisher":159,"about":163,"mainEntityOfPage":167,"articleSection":170,"keywords":171},"https:\u002F\u002Fschema.org","TechArticle",{"@type":156,"name":157,"url":158},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":156,"name":157,"url":158,"logo":160},{"@type":161,"url":162},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":164,"name":6,"description":165,"additionalType":166},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":168,"@id":169},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28319","Cybersecurity","CVE-2023-28319, CVE-2023-28319 vulnerability, CVE-2023-28319 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[173,181,197,205,216,226,236],{"Operator":26,"Negate":26,"Nodes":174},[175],{"Operator":176,"Negate":26,"CPEMatch":177},"OR",[178],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":180,"VersionEndIncluding":26},"376FCCEF-74BD-4A99-8A1E-B70A83D89E71","8.1.0",{"Operator":26,"Negate":26,"Nodes":182},[183],{"Operator":176,"Negate":26,"CPEMatch":184},[185,189,193],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":187,"VersionEndExcluding":188,"VersionEndIncluding":26},"FB5312D6-AEEA-4548-B3EF-B07B46168475","11.0","11.7.9",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":190,"VersionStartExcluding":26,"VersionStartIncluding":191,"VersionEndExcluding":192,"VersionEndIncluding":26},"5B763A1F-C183-4728-B593-67558FD9FC36","12.0","12.6.8",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":194,"VersionStartExcluding":26,"VersionStartIncluding":195,"VersionEndExcluding":196,"VersionEndIncluding":26},"3D701507-146E-4E5B-8C32-60E797E46627","13.0","13.5",{"Operator":26,"Negate":26,"Nodes":198},[199],{"Operator":176,"Negate":26,"CPEMatch":200},[201,203],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1FE996B1-6951-4F85-AA58-B99A379D2163",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":204,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"759D1A24-B23B-404E-AD39-F18D7DBAD501",{"Operator":206,"Negate":26,"Nodes":207},"AND",[208,212],{"Operator":176,"Negate":26,"CPEMatch":209},[210],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":176,"Negate":26,"CPEMatch":213},[214],{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":206,"Negate":26,"Nodes":217},[218,222],{"Operator":176,"Negate":26,"CPEMatch":219},[220],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":176,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":26,"Criteria":65,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":206,"Negate":26,"Nodes":227},[228,232],{"Operator":176,"Negate":26,"CPEMatch":229},[230],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":176,"Negate":26,"CPEMatch":233},[234],{"Vulnerable":26,"Criteria":71,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":206,"Negate":26,"Nodes":237},[238,242],{"Operator":176,"Negate":26,"CPEMatch":239},[240],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":176,"Negate":26,"CPEMatch":243},[244],{"Vulnerable":26,"Criteria":77,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8497A4C9-8474-4A62-8331-3FE862ED4098",[],[],{"lastModified":11,"cacheTime":249,"version":250},1792373689184,"2.0",{"score":252,"band":253,"action":254,"scoredAt":255},51,"Medium","Plan remediation","2026-10-16T06:58:08.385334+00:00"]