High severity · published May 26, 2023
CVE-2023-28319
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash
7.5
CVSS
2.5%
EPSS
No
On KEV
Description
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or otherwise get leaked and revealed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
macOS · Apple
11.0 before 11.7.9; 12.0 before 12.6.8; 13.0 before 13.5 · source: NVD
CD
Clustered Data Ontap · Netapp
All versions, or not specified · source: NVD
CU
Curl · Haxx
before 8.1.0 · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H700s Firmware · Netapp
All versions, or not specified · source: NVD
OA
Ontap Antivirus Connector · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-28319
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-28319
Mailing List
http://seclists.org/fulldisclosure/2023/Jul/47
Mailing List
http://seclists.org/fulldisclosure/2023/Jul/48
Mailing List
http://seclists.org/fulldisclosure/2023/Jul/52
Exploit
https://hackerone.com/reports/1913733
Third Party Advisory
https://security.gentoo.org/glsa/202310-12
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230609-0009/
More from macOS
10.0
CVE-2025-43300
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2025-24085
Apple Multiple Products Use-After-Free Vulnerability
9.8
CVE-2026-65400
Apple macOS Improper Authentication Vulnerability
9.8
CVE-2025-31200
Apple Multiple Products Memory Corruption Vulnerability