CVE-2023-28319 Use after free in https://github.com/curl/curl
A use-after-free in curl's SSH key verification allows attackers to leak sensitive heap data via error messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-28319?
CVE-2023-28319 is a high-severity use after free vulnerability in Apple Macos, published on 26 May 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
Weakness: CWE-416
Which versions are affected by CVE-2023-28319?
It affects 8 products.
Products include Apple Macos, Haxx Curl, Netapp Clustered Data Ontap, Netapp H300s Firmware, Netapp H410s Firmware, Netapp H500s Firmware and 2 more.
How do I fix CVE-2023-28319?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2023-28319 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-28319 exists.
Other vulnerabilities in Apple Macos
Sources
Also known as ALPINE-CVE-2023-28319, AZL-26795, AZL-26807, AZL-26810, AZL-38554, CLEANSTART-2026-QV50909 and 4 more.