CVE-2023-28319

A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.

• CWE-416
• CWE-416

• http://seclists.org/fulldisclosure/2023/Jul/47Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jul/48Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jul/52Mailing List, Third Party Advisory
• https://hackerone.com/reports/1913733Exploit, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202310-12Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230609-0009/Third Party Advisory
• https://support.apple.com/kb/HT213843Third Party Advisory
• https://support.apple.com/kb/HT213844Third Party Advisory
• https://support.apple.com/kb/HT213845Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jul/47Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jul/48Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jul/52Mailing List, Third Party Advisory
• https://hackerone.com/reports/1913733Exploit, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202310-12Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230609-0009/Third Party Advisory
• https://support.apple.com/kb/HT213843Third Party Advisory
• https://support.apple.com/kb/HT213844Third Party Advisory
• https://support.apple.com/kb/HT213845Third Party Advisory

Published

May 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28312Azure Machine Learning Information Disclosure Vulnerability6.5
• CVE-2023-28313Microsoft Dynamics 365 Customer Voice Cross-Site Scripting V…6.1
• CVE-2023-28314Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vu…6.1
• CVE-2023-28316A security vulnerability has been discovered in the implemen…9.8
• CVE-2023-28317A vulnerability has been discovered in Rocket.Chat, where ed…5.3
• CVE-2023-28318A vulnerability has been discovered in Rocket.Chat, where me…5.3
• CVE-2023-2832 SQL Injection in GitHub repository unilogies/bumsys prior t…7.2
• CVE-2023-28320A denial of service vulnerability exists in curl <v8.1.0 in …5.9
• CVE-2023-28321An improper certificate validation vulnerability exists in c…5.9
• CVE-2023-28322An information disclosure vulnerability exists in curl <v8.1…3.7
• CVE-2023-28323A deserialization of untrusted data exists in EPM 2022 Su3 a…9.8
• CVE-2023-28324A improper input validation vulnerability exists in Ivanti E…9.8